<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2323">
<package pkgid="0cc2a6e5853333fbd04a8550ef9ae8c6ecb836309b90b4026a2191ad670bb877" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="155633dc41e1170da1205fdeb74507b18c323c079d64eb2244b27d9e0811a9f1" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="87c48c0cedf57751457d2a0f1d95e1344468db2a2af4d7473bb22b2707307a50" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="da683275759267372cf1523164799c185280cc85aa87a1302ad009eec8075d12" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="2af5a9cd5e2365fa26a0e813d413de7d17e33f4a9b6d612542e7c264df81152a" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="eae951a3ffbfa4d6478d28b429439f79bf8a3bb41ba22349490fa97b864b2c03" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="ea651745254202d7b4645aed1bdb9aa5a63a052bd5fb5ecc3e89b15e61f1aba7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e861788635d2cfac9dbe6ab20cad8b482a9a0bd3f59480302df59738271b57e3" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="2f409a818f0f113ca5756d5c3c172a1ccedde910b0f7e2c9b2262b2a5d8c78da" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="9bee2aee8fbc9b0fe5798bb33ad1057bccdd1fa54d972d07a0b29bd7907d9fa7" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="6a0cedaee830bb7b503e8f9c68b7f4a8f90f7f9fe4549850184b2a12a27d4b39" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="3817d4511123198ed0b7a57d805d53413a98d679d1a30fca544db0175a5482c9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="1d5023d400ae8145f0d8d431aa7c26718b8d0e677ecdff22b8aa7f0c254826ba" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="12b52df107de3bfc23857a14f32323bfc0c97acc00c4a74e1a441719604b10e2" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0690ba86efcfe2e5df79e74c0a6f6a98a17ca60a6cfb123d9a2cf25d0e946827" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a09e51cec388ce4dcd9d345ff57474043461b4469370d427c64609c80e9aca52" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="225670e5ed028011f08debed852183f1b01dd891c41304f847485f67294ce894" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="78855252c5c79ea057c3bf1e900c1cad9f5b6e96b11731aa1708387914ce8d6b" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="381623c41c63c2680716199f4ce745bc95c8f2d5077c960fa458303361f89583" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ab1b11f2d417071df1cb009a1a64b84d2f24431e70d200c845f0e5b4fd4c3f48" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="b14c18b8dac509523c8ad3acd3762242d93d0288e54c756fd837d6a63bf25e9a" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="dcdd94c7e5c85f66fe50f34e976cc61e70ed85355da7022a3b075add806126e7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="3dd617a023c2b320f0c8ded658aebcca76f6e097e7b645bfcca06d96d8e2ad60" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="41a3fce1e1983b9c07b12b6ebbd6bb3c293933280146e1973301cfcf59dbe06f" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="45df44d49eeec3b2724553f0b7bd3ca09902d9bd4e51dafe01672a405226af48" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="a50ab1cccb98a48682d50a127b35bebb51ee7427bef4abaf4536f5f6f8b54bb0" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="92c137b87015c533b23ca400c4f1d655511db73e155f50292e18f6819fed393b" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="3f3501c0734b5d41ead36a567ad11c45df17fffb87e3c95eaeb3da2cfc1f053c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="63ac707cc0189b0013fac5cd53cc9ccea336c148a2a07c22b68a242a22176c33" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="f3ffff50386eefda00f36e47ddb692873660389eb7abfb7826b967c726430e5b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="b1da410e2bef35b5ff9cb650caf8bde025c7e1fb4931b8aac5986cecb9edbd3b" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c81de5033382a1baef8d556bbf0d7e94a54b3a94e557085d063b2b2f72be5206" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ffaac544e48d3abcb0e3af4d4ecf10e12cc9d94652f3a446925bb473c5fec76c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="5dabefc54e8b8f646338b96e86d6d09a6841341de99e4c88e43bfd4c15572d72" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="63c8d20bc1230bfe427a0b1f46409c603bdc13f6356c3cec36713eb1512f9b62" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="09dc812219793c81cf3742992e537606304e9070f86d247acd5bb46471037bd6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="b53b3029f39f0dd336d2c494aa51723acf3ccdd4f937eb0c9a43879b031df64b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c95492c6c19a14f9c3322fda7e66e518533cfbf5f68973ab921ebe01717e5b89" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="4f0f13b35988cbb7c2c932dcf572732ec84d5172daf5c80b8c07b51c7acdd753" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="448cf6ceee4d164e1d2df5654ec630ee4174ec1e1da5d8af72ed012a9c5b0e2b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="9b557aaa3d3a1b698e29b9fe38ce2332402064786d66c32fabab5a4fb5f9246a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c7a872d36a4917528daa9c46d08dc32043166d267d2437cfbedaab58ce73b585" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="b422b95fcf96224a4efac629d2aa1fe29ac997a9f1ca8072f99691610093e77d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="7785eb6dc80e7581dcf2642831afa782cd1c951c1879b83d2f27e4cb9fd86a51" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="490b513dca079970ea2f0628bd2a7ab0999bb9f91100dcb97926c375f078db59" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="df829fd191df7dc70428ddd7764bbe2085b6a0bb858f9e70180a198dd938bfc1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f9de92c2fe72f1ea2cab75f3e1971b1ef634bfe4c6ef9ea0996faf08b2249cb7" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="1024a691677eec2abe9a1ce0354bebd7de726c1ba066f6cabf32b575a250f00c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="be9cd5c0609c86d7ba3d8593139fc47942153b3216b1468e9a2b1a68269b7ca8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="a797eae4cde6ca192f78482ddf77ca7cb7fa818858d128aea6b9e0d10bc0a9ca" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="28c0db5b59d2936400d1607d5fc70cbc3940979ca61b9b2b80d0d439d21e4925" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp151.2.3.6"/>
  <changelog author="pcerny@suse.com" date="1530100800">- update to Firefox ESR 52.9 (bsc#1098998)
  * MFSA 2018-17/CVE-2018-5188
    (bmo#1392739, bmo#1437842, bmo#1442722, bmo#1450688,
    bmo#1451297, bmo#1452576, bmo#1456189, bmo#1456975,
    bmo#1458048, bmo#1458264, bmo#1458270, bmo#1463494,
    bmo#1464063, bmo#1464079, bmo#1464829, bmo#1465108,
    bmo#1465898)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and
    Firefox ESR 52.9
  * MFSA 2018-17/CVE-2018-12368
    (bmo#1468217, bmo#https://posts.specterops.io/the-tale-of-
    settingcontent-ms-files-f1ea253e4d39)
    No warning when opening executable SettingContent-ms files
  * MFSA 2018-17/CVE-2018-12366
    (bmo#1464039)
    Invalid data handling during QCMS transformations
  * MFSA 2018-17/CVE-2018-12365
    (bmo#1459206)
    Compromised IPC child process can list local filenames
  * MFSA 2018-17/CVE-2018-12364
    (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * MFSA 2018-17/CVE-2018-12363
    (bmo#1464784)
    Use-after-free when appending DOM nodes
  * MFSA 2018-17/CVE-2018-12362
    (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * MFSA 2018-17/CVE-2018-12360
    (bmo#1459693)
    Use-after-free when using focus()
  * MFSA 2018-17/CVE-2018-5156
    (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * MFSA 2018-17/CVE-2018-12359
    (bmo#1459162)
    Buffer overflow using computed size of canvas element</changelog>
  <changelog author="pcerny@suse.com" date="1536321600">- update to Firefox ESR 60.2 (bsc#1107343)
  * MFSA 2018-20/CVE-2018-12381
    (bmo#1435319)
    Dragging and dropping Outlook email message results in page
    navigation
  * MFSA 2018-20/CVE-2017-16541
    (bmo#1412081)
    Proxy bypass using automount and autofs
  * MFSA 2018-20/CVE-2018-12376
    (bmo#1450989, bmo#1466577, bmo#1466991, bmo#1467363,
    bmo#1467889, bmo#1468738, bmo#1469309, bmo#1469914,
    bmo#1471953, bmo#1472925, bmo#1473161, bmo#1478575,
    bmo#1478849, bmo#1480092, bmo#1480517, bmo#1480521,
    bmo#1481093, bmo#1483120)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * MFSA 2018-20/CVE-2018-12377
    (bmo#1470260)
    Use-after-free in refresh driver timers
  * MFSA 2018-20/CVE-2018-12378
    (bmo#1459383)
    Use-after-free in IndexedDB
  * MFSA 2018-20/CVE-2018-12379
    (bmo#1473113)
    Out-of-bounds write with malicious MAR file
- removed obsolete patches:
    [mozilla-glibc-getrandom.patch]
    [firefox-no-default-ualocale.patch]
    [mozilla-bmo1005640.patch]
    [mozilla-language.patch]
    [mozilla-shared-nss-db.patch]
- added patches
  sync with openSUSE:
    [mozilla-bmo1005535.patch]
    [mozilla-bmo1375074.patch]
    [mozilla-bmo1464766.patch]
    [mozilla-bmo256180.patch]
    [mozilla-i586-DecoderDoctorLogger.patch]
    [mozilla-i586-domPrefs.patch]
  additional architecture enablement:
    [mozilla-ppc-altivec_static_inline.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="cgrobertson@suse.com" date="1538568000">- bsc#1109465 - Add mozilla-bmo1472538-update-bindgen.patch and
  mozilla-update-cc-crate.patch.  This fixes an endianness problem in
  bindgen's handling of bitfields, which was causing Firefox to crash
  on startup on big-endian machines.  Also, updates the cc crate,
  which was buggy in the version that was originally vendored in.
- added patch
  [mozilla-bigendian_bit_flags_alias.patch] (bmo#1488552)</changelog>
  <changelog author="alarrosa@suse.com" date="1539086400">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process
- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)
- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading
- Fix typo in an old changelog entry which mentioned a wrong patch file
  and really remove mozilla-glibc-getrandom.patch as should have
  been done some weeks ago.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- Update create-tar.sh and source-stamp.txt as should be done
  with every version update.</changelog>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
</package>
<package pkgid="bd31fe54b71a3a2a8eee05a2945f32bff73ed44aa4d9ce9f39a885608fd64f8f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="alarrosa@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3
- Drop mozilla-bmo1472538-update-bindgen.patch which was already
  merged upstream
- Update mozilla-update-cc-crate.patch, since cc was updated to 1.0.9
  upstream, but this patch still updates it to a newer version</changelog>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="65f91def7c9313f7cdac9befee9681b61ae9e1283438b00857e9276c1b6bccc7" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="cgrobertson@suse.com" date="1544616000">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6
- Removed obsolete patch:
    [mozilla-update-cc-crate.patch] Applied upstream</changelog>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1562673600">- Mozilla Firefox Firefox ESR 60.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="c6f3438bc42bdeec687f615437a4e4a477887f14a12ddfb782829bbff32fa5ce" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="1fbbd8c77bc1108e42b3b8a43e418a270df9f8cb220cd37e7e34fa8efc25f98b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="cc98766974b91cb23eb75520cd3d671c918dfbeb21c6d87e61946c5ec99bf326" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="411e782f66af0533b03a391b016c9131f12a58b0be485641392af35bf391c9ae" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f73cc782015c3f46544b39ed79fd301ba712eff1facfc1b926dee452d4400b8e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="84ce73fee3ecac9a555747571acce9e94dde82af5a7076ef0743363c2e7700be" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="ff03d2222f05fba3bf124169f74a34fd1c74c50acce2422c4d21bb491d1b5b41" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="64b87078d36aaaa0a984f6420f7cbae011f993ed5ddea33b52d5799735a5f982" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="e569ef43a3eb78f0c2e83338e6a830e2b60eaca60b42589e89e1929ce01181aa" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="8b85a79e17fb7454384d1cfd5061249a39b779bd2321a2891465516be53aa841" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="465c212728df4068ef3283dcbbfa7ec63e136cec281816fba46f448d47f4b19e" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="30a5a4c4470534099c8f061ee686eb17e17591e57320309b2272a1850b5e0549" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="06c2b7c4a4dae7c63a87a2e3d40b9cf3426906fbe531cf7b44d65f49266f9409" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp151.2.4.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="5415e5ce7d20b0f1bc4bdab33c3c00ded514a635fead2df1857466e185f6ea38" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp151.2.7.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="980f48498d7888ca41d3d8fb4b7c12c3b58724a2e2f57fecb3ad71e086114e45" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp151.2.10.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="e6f07e54afc825c65e4507b5105d6e3d8d3f454376da719c44c0b19ab57e174a" name="NetworkManager-openvpn" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="8607808dd401e2f7c84bedbe52b9c8367c239120827f7002bc8a310f56282d33" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="00245319793593edb53b060ab972e4bd3b7140d7d773541fd3d2627d3a758646" name="NetworkManager-openvpn-gnome" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="2559646f0492b36be01d86d437f6c44e430daeebabb5eb0b50feac57ba9521dd" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.8.2" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="d47ba39cdabf2fe22b6f26cfbd8fa597221a34152b0c7f7da3064ecf5f7b395a" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="c2dccecc11dabe5a03d84b7282c6b667e674afe3fecbc717e5b4ff1b63b97ce9" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="ffdea299f2e70f29dd3ea7494bef89d1bd259507269d64634c5d8fc8d1cecf3b" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="d3d9619671da55cbd281589ece5edcfbc479e8a8d2b42b8a34d505869c4e3136" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="384b956c4efc4c00f1656734b0707708abf4119d0e3ef16c1b914028dbc01d00" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="0706da34751c6a18a1f4a0c1a7178276d95c539c8ccfe7f9f99cc5ee57109349" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="cba251ef83f1a8bd150047b9c98ee0600e870c4820a6ae9e990d7130e7ded64f" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="6a3777d55e435d44e71a887ed7c2cba650932452e2ad5261949a6ead4d8f4b6a" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="9bafd9beba9b594e2d391b18390f0ad7a6e153007fdaa356b61eb8ee2dc4d64b" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="620c362dbc3c3416281b329b09ff00e0862653fa29354949e21a421e31420587" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="1fe4167ad94c5141942fe80688caa2b6f52bc1c74e3cd9ae43f0144642db7f64" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="716476c3713918d4ca41b08bae8e80ef123b87d8e3c736552dafa4296c4077e4" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="df559d0f012333d73cf0f6a649862ad437d8874bb529ac77aed673cf322491d1" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="472e700f5aeccaab3b0064c7243a9a00c69214c948db2f305a37c2f705db5015" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="cea51600b38f6708dd72f75ecbd831ed8caca56334677c7df8e13e7d6dbe0a9e" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="657e7a3151a669cd692ab6c56ad7fdee794adab8158d1996c89fe6fcfd37ee6c" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="41513e22aa900d7cb80f0976fafa4c1fae33bcdcc8f62a898858bca2b9d56a96" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="45b01c69b60eebe09d0a17e563d4386d2c6f644d43c5f292c2c1a1ff5a8fd5df" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="6612db6e0c6521c17545430a4c1a86f62bf0a87105b3c909c62a2a58e7d98596" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="e6d00acea74eb7e352bb2178b72fdfcdb682911f4522ec3decfed83a9540c266" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="792b864d53387957f55347e6e2382b681e0b295a150a55da483bc3eddef3d985" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="29f834d099ee5d04f0381defb3332db43016d6c328d28f28714bbad1a9b6e843" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="02eeada02182d1b8fad842d523a11c23925c6d4de9c12c4a53eff8807c5a05a3" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp151.5.3.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="5d504abcc116f6eaf6b0d08a01800d69631b5a0de586713a600312c789cf7016" name="akonadi-server" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="cf7ed36281046c2350d33c9a30eb8316a1e96cfdd1e3636eb38f1ef4daec2650" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="43b774e220d33433afd8e44573828607fe6063dbb66565b50f3b4936968cff5e" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="5d4a382a80697d610fcbd60928759dc3c4783141bd35f4e90c1b3631781239ec" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="ab701362f74f03dba50db290000181c93e491b85654cd6bdb2d7008e0bb84bf0" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="464def0e93649f9bb5e1000c1b6870d2d3339a66c1edd855e4fbdc884cadd4a0" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="d9e4a18645571d4ab2e4b41768351a0fade3d0ca1cfab1d801e450b3817f297b" name="alsa-firmware" arch="src">
  <version epoch="0" ver="1.0.29" rel="lp151.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1202472000">- updated to version 1.0.16-final:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1214481600">- updated to version 1.0.17-rc2:
  * update asihpi firmwares</changelog>
  <changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1232625600">- updated to version 1.0.19:
  * updated PCXHR firmwares</changelog>
  <changelog author="ro@suse.de" date="1236254400">- fix build</changelog>
  <changelog author="tiwai@suse.de" date="1241524800">- exclude some firmware files already contained in kernel-firmware
  package</changelog>
  <changelog author="tiwai@suse.de" date="1241611200">- updated to version 1.0.20:
  * just a version number bump</changelog>
  <changelog author="tiwai@suse.de" date="1254744000">- really exclude firmware files in kernel-firmware package</changelog>
  <changelog author="aj@suse.de" date="1267012800">- Use ATTR instead of SYSFS for udev rules.</changelog>
  <changelog author="tiwai@suse.de" date="1271678400">- updated to version 1.0.23:
  * update asihpi firmware version 40304</changelog>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="a9db7f8adcffe519b1ff5b0a0e7269d977201fc5a2e8719192cfb9da3372ff36" name="ansible" arch="noarch">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="be9e5c3f56ceae1c8b15711f8313c01d1bb41b3af02bef41aa9fa2bc9b19d78f" name="ansible" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="415cc4e2ce8fa85a15689bb8a61e0679711453829d77b352da1d12735f030ee7" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="33e48ffe7b4c1dcc1766336ebd538431ed94e1759d64ecff496a423129497585" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="c05072cad9b1832c74dab33fc02ad1f6090464b58eb4d0aeaf8deb6faeeef140" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="3bc39d26adce24cf1400b59e73d276516d0b041e1c3d3bb2deaf43984ca0cab9" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="3987c57f44d0760b665366a422ac3fcb09f4c6bad0f3d554f0b171bb92a9204a" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="46d98c5d274a372f780520216e9f7e8603e5ee00b3d1c9b503ce8d32a67f1e0d" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="7ccb91fea5787b697d475c5797e0e8013980fce2730f8fff9f8ef6f9b41d28b7" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="a9c8e8ca93809e97f333b7a468200ad7806ea644811419007c7876ad68da486a" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="338dd805beaa5a9763b047fdcfee9b2d61e6f65d411adf5c0ee260c122bb40e4" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="82eea90d27f4ea3d9abba8c6fd4e947841465b4bbfc8ce63b3b7e518423f95ff" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="f06e802353c1bd893d612bd82375f933df307721ae5b6ca831c8509f5a3c026e" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8e211b6d6f7ea12e13afa2e8585f9f15ef4a225cf74658aa7d5d42b630c88523" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="00ff809100c17cf61d5920adfa1611e321acdb5a5213a6dbd293c2a9bb95a42f" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b222a78d3bfd3556e533256e5446b5ddc1cdfd97bfde7cea3f2c3e0ed7e28b40" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="36dbcb3bd7e89614e6ff23db7214b6ba8f6169cacbbfbb9e9e579be5b0473db2" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="b289ab328cdbac675eae8498480fd1df1929cc609f0ca7671868b10f737d8a6a" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="a9fdd4b7cfa93385390f239da20110dc2a9dcca8f78b8c71995e06c47a1fa748" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="778adf1d259158eeb67e138cd7fe5eb79d737147f1e12251f66d11b42a61e098" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="28f926b3df4ae27a3fc739b569f1e2a34592ec4d96b6205278cf2c9a7a278769" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="d8e97503ac23b2e185b68b0c0c449ff50daeabb655fe82e0804248bcc2337ad0" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp151.8.3.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="a2ffc30651cf92605952d6a7d41fab9c4358d1051a5d1ec494d3759607159e75" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8510753c2156ca13df1180018b7e0b3be22558a4cc6c854f10451aae97263277" name="aubio-tools" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8d7e263ff31b46d649eff48637a26948d6e7a8e17ee107c69a768db7d9dfea08" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="447e0b838b691430903a34f60f8527a9ed11e77585d484cc40674175b1491fbf" name="bind" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="48f308496c963c14f9eef25f4bb619a8cc096734b28c5b502be09551599f1e18" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="101e6aad1a5db68b6455b188304d771682782d36f313c3037a8a06c5e5248f83" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="81a1480f81864051bbbf2805f4f473d3c05c733cf7e3ffd32bf6458424ac1471" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8ad17b9506b7aca3fcc0d07065edced0d68d0cc29175b433688c64beaa98f185" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="01d0effddb6fc68156033906368aa2dd0a46caa6314e2e04884663002ed7a9e8" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="37d9ec12a722956c3618c0c08fb384c58fec2c07caf5f7c12388acaccbcbf842" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="65c4af3562415fde9c66e9191fe798f8252e84c468521c6bd078af1d1370583c" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="49a474897df12ee1a442da1e43b273fadb399ba07d8fe4cc40e757b6052f0c4a" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="3f3838f42b7fde084d43c0fa1a7aa2aaec871f5076cb62fb3c41f7d0e54628bc" name="bind-lwresd" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4fef5a72ad2f4621ad65aa66c9f770f49c18d25c500d636fb8f80881c6f0d6d7" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="aad2685b6b58f1481cf3bd54fdd557fda8c7bee1a5cedb1bb528e263b0e50a2f" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="cb946c44efd26c5b5e97ee67f5b125c0b0b3ae6c3708e7e28c68feab31f73bd4" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ce97aa8f28072a8d6239201fc8758fc70c6709f87af2001de8853f2db843185b" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="76744b989a1fcfc4823c491052ab26f6803639faf4a9f6eb673ccf499945c85b" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="2a65c4c8649cdae1c2d26a34f66d75e845659828b20a06e8a3d163c8aaf54b21" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="21e323128e518566bfaeacb30c793f4279cbec6894efc5164cb97cf306be8fc3" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="05abbd9f3aa1403a6aa77b2f7206a7913d3f40ff74235eb88bc7763468be273d" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="f97f4c75e0b24548c940bd50bf36ecad1979559c9ee7a8f7ba85bf996c53d0ea" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="08cdb01c0fb9f2825389a2991494c45fcc4e5cd466ea1f13fd90a20e1f15a74c" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="145475426a71ad3273cdb938f2791e2f4d7fc65684bb99dcd1529dd302e539bc" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="70f6cc3eeeb8a60f51a3a8d62c2472f3f8792de9affe2cc8a73486b95cf19c88" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="7fbafd4303f4933c95496131c43a6fb1f545982f38207b9ad471969dac1c816f" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="64a0aee8b16182396a9ad9fabc70cb3d98c86d3d6bf2f86b1bc4bc3b015a48ae" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="0e674f927446ef3bcc585ba70baa6c74cd40db9f56bdbac066f70f48a3e30e16" name="bubblewrap" arch="i586">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="5bd43bffdb8f3d9621d1afff3f2d207695b1b67ffbad4b00f38950ccf9af3a80" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="015c277c83af83593d0fd13d28ac499c3791728d7e50aace0376e6c0a13e1d0c" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="lp151.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt; - 0.3.1" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
</package>
<package pkgid="40c518be5bf0b49f373e81676ef30da3c0cd81c0e2155cf8f603bef672850219" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="733b95b42af911553cd573fa396d134c98e99c10386843d6201a32640532422b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1358769600">- Executing autoreconf requires autoconf
- Set RPM groups to the common ones we use for library and
  "-devel" packages</changelog>
  <changelog author="idonmez@suse.com" date="1358769601">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="2ce75b1d0edf34d3d84ece14e7f3dfe1fd9462f4be43242af32b658060d76fef" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="deac5254032a164a2bab0ba8a6b0ac5893390c2dfabb3a1354821eefd08a07a5" name="bzip2" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="4f1bcd9f3f60aeee521d0c4ef5272d303427f098f26311af1c88276fe43c050b" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="idonmez@suse.com" date="1358769600">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="b0966ba15a12f4668dad31b16dad99def66eff270524d360eda6d7a574d1456e" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="5febd550fe022a481c448052a7894d1213df2a8fefa24342b2da8231e8f25b34" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="efaa72dd646bd816520aa1a07e34d5b0b7d490342fc7344db8db181db0ee9199" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="2c278743a3f84f2413bc82e59d0502f01763310e6751650b84af95850a307b8a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="529d41e52e1fd3cf102a4f6e7954163c6d78e06078c340d5cc7324bc2fd68af0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="15017191ec8a594c636086501c82f2def8105bf1f887e6ae28df5c6cf72a6f68" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="1eff2764caf34aa00836a7e747d94033f19ded603c6e01166cab7f2a9992422c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="b9691c9621d6a535594aa4897ad04fc10cd88f7550cbe8bb6cb68e15773917ef" name="chromium" arch="src">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="3706fe8ecaf00895627d33acdeede6c9bedf4c2118d6341491e0ecdcd9bd293a" name="chromium" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp151.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="6122844f17ba0ec7f1d4cfd4344da361ae0f7aed5775ec64dc3ed4f857332df7" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="f3815db0ae78582e14a6452239f3efdc7d1d32c1b51221641e6372b8f2c68329" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp151.2.12.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="611b90d8304dd0d37cc17fa5c449b3c9eaceb8d7c8234d8ae4ff1e15dfd7802f" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="a464cd9e9a0e9e49bd65fb4fb37143c8eb4af677d532815addd35917eb5d80b2" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp151.2.6.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="5c5354f61539aea37e5ba9e479d49428c8cb7ac5314b96e45bab9d99785c39a5" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="44bd9470ba236106432b54f6467ef5fb0250c880f905407369b3fbc709c9a06d" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp151.2.9.3"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="32c0b335ee7d0141be6fef061c64a5aed1d2ff0dd09b3e174b167e093f15316d" name="clang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="4d8c06827bdf8c4d59062b134085e5b01cbf93abc40ceada4e24a6e432ad5a89" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="a6084ee0d6c0e129796b5f7433f31bd4cc5fe49c5b031a2c463c090e28921528" name="clang7-checker" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e1e540addb29ec8bd822fe7b5b6419423f6bc8f47b9d338d91c1d08f435ff0f5" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="2faf401b41c174b063a5ec2c81bf95a44628cbe61a00ea9235424e424dd8f26c" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e67ae10a52f3fdf4e9acc8cc8780400af4fea561355e733a3c8c2fb9e626bd79" name="clang7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="00015420c6c7997ed24cc98ccb3ed2d315af2f0b4ee9b6f898e4377b9ff0a978" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="fb0bc0233ca37f5bb3a6acb8ced151649cfc4700ba3148a5ec66d0c4dc68ad60" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1382011200">- Update to 1.2.0:
  * Add support for indexing and playing music from Box, Dropbox, Skydrive,
    and Ubuntu One.
  * Add support for Subsonic.
  * Remote control support for Android.
  * Add a Playlist tab to the sidebar.  Starred playlists are saved in here
    when their tabs are closed.
  * Add configurable blur &amp; opacity to album art when used as a playlist
    background.
  * Support Opus where available.
  * Support .mka and .oga file extensions.
  * Parsing support for WPL playlists.
  * Sort providers by user preference.
  * Add year and bitrate to MPRIS2 messages.
  * Add "not equals" operator to fields in the smart playlist wizard.
  * Add an option to write ratings, play count and scores to files.
  * Add options to show the rating and score on the OSD.
  * Add support for POPM tags.
  * Add support for FMPS tags in Ogg, FLAC, MP4 and ASF files.
  * Compile the bundled Taglib with ASF, MP4 and Opus support.
  * Make it possible to cancel cover searches.
  * Add an option to resume playback on startup.
  * Add support for Performer and Grouping tags.
  * Add Radio GFM.
  * Add an Apply button to the settings dialog.
  * Make it possible to mark all episodes of a podcast as new/listened.
  * Add an option for fading in/out on pause/unpause.
  * Add stereo balance slider to the equalizer.
  * Add a --restart-or-previous commandline flag.
  * Allow files to be transcoded directly from the playlist.
  * Export downloaded album covers
  * Removed iDevice support - it doesn't work well with modern devices and
    libgpod isn't being updated to support them.
  * Many bugfixes
- Drop sites.js and ultimate_providers.xml: fixed upstream.
- Drop clementine-nowerror.patch: fixes upstream.
- Drop Add-a-setting-for-disabling-moodbar-generation.patch: fixed upstream.
- Drop clementine-libimobiledevice-fix.patch: iDevice support dropped upstream</changelog>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="d792489900d14ef1c8dfce3842dfcbb1be822a67200e1f21ee33f81be8d9ce93" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp151.3.3.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="d329803ab5ce578013ae5baa64e08416d329a0fb45e7cc3ad9c9c17c7dac6202" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="80cdd9c0f86a8dbe1cf8292296afa2dd2d53ff88ea4a2e56e20d20c68ef762f2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="42a4b97595729d8a3bf26db914550b49f5cea71a32c78efa5618015fdca5409e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="93442ec88ca9544dff4bcdb1261269a1941866663f54ba71b8f67331340740e4" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
</package>
<package pkgid="a782a045acb13f18838eb96ecf44b15f6bc2d58089c85d09c19fce1390f2186a" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="eac61276902f19814a3e58609223b99f569d3dad4d4a30ff07c69b90c03b987e" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="1864164f690773a89c17a264ffacd8b754d7e18b549acaee6400e17991010a93" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="42c85594e7bd9781b7b23ca1635d896b0789db4e264bdaf9ea236cd0ce2b9838" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.0" rel="lp151.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="8b22f3e80ed123b1e78c734e7ee3b25839b52773004a28eade06ead2b7e4718f" name="clustduct" arch="src">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="dc36e02592d3c94396e704206fd0c0a463a5f85375165943813dc01a3eba63e5" name="clustduct" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="lp151.2.3.1"/>
  <changelog author="cgoll@suse.com" date="1533211200">- First commit, which installs clustduct.sh to /usr/sbin
  (FATE#326456).</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- Updated to version 0.0.1_alpha with following features
  * lua based
  * BSD-3 license
  * autobuild based</changelog>
  <changelog author="cgoll@suse.com" date="1540468800">- Updated to 0.0.1_alpha2 which now has as kiwi example file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541419200">- Fix some orthography points in the description.
- Wrap entire %post in ifarch x86_64.</changelog>
  <changelog author="cgoll@suse.com" date="1541592000">- Updated to 0.0.1_alpha3 with a script for preparing the
  tftp directories
  * removed post sections which prepared the tftp directory</changelog>
  <changelog author="cgoll@suse.com" date="1543492800">- Updated to 0.0.1_alpha4 which does not install files to /srv any
  more and do not require specific lua and syslinux for build</changelog>
  <changelog author="cgoll@suse.com" date="1543924800">- added COPYING as license and simplified spec file</changelog>
  <changelog author="cgoll@suse.com" date="1549627200">- Updated to alpha5 which fixes linebreak in perpare_tftp.sh
  (BSC#1124812)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1554120000">- Updated to v0.0.1_alpha7 which adds close to every lua file
  operation (BSC#1131151)
  * added SLES kiwi descriptions for SLES builds</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556798400">- adds the valid SLE15SP1 descriptions (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1556884800">- updated to v0.0.2 to use the right product (bsc#1131150)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1562328000">- updated to vers v0.0.4 which includes several fixes
  * description
  * option handeling
  * renamed kiwi description
  Bugs are listed in (bsc#1138326) and (bsc#1138296)</changelog>
</package>
<package pkgid="23f88970004f9eb33b660179f49c12177dd747572e86f36a905b2f674ad24ea6" name="cluster-glue" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="ec63291be34f5083a2ec10f815e17ac61c582c23b68fe46ff65da7f712a880e4" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="5a03b3e4d0324d8726cfc7ca846dafc292b3d546a65a5c31ce894216470122dd" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="97cffc7783791e2f86fcc3d739fac10fa95c77f27156e140b597a8cd98b65213" name="containerd" arch="src">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="cf97629c6b772422027b3b588477290b597059182cb4c5b888e3928d02c265dc" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="69ee8199e5749873d25a80eb6dd4e993b9b370d000a568cd2cb8984f48cf2235" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="c328c70eccbcce4f605270030366b7c1ef48b9008c1ed2a341076d98fcfc7408" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.2.5" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="bf9d14bacb6d481c438c45bf72c4ae19de04cef8cf6daff7019b60ab4b957478" name="cron" arch="i586">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="9982078868e91f0dfc2ece22908b57c31ccfce567c6926df53662860e8b580c8" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="d8448b11e07acb6618e6cffc3766f256c6bfe315092b2d1cf07d10680e2012e9" name="cronie" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="2bffb0a795bc44e64a99bdfc3a526daebe603c06815d0f692b38aec24c5adba9" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="7185dfa1f4af0f063108eacd3b342a3029858d7ee4b4b8fb2377e39ab4626009" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="5cca7527fcbc2f401552912dce6eca3776d9da84d251305791b01c985eb1a17b" name="cronie-anacron" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="fa8b484830d6282a7cc98e15a19c5d9d6b7005fecb36afd1e10197255bde7ddb" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp151.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="87a99b33f8af71fb2e650ed6c5a98f7a507ea2c4d26c5644199c5d87b6c37aac" name="ctdb" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ebd38576b35fc86277e9305e34ba220e85d882f7319679e10b1f4ba0981d6cf6" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="177d365f2a67ef5d4610806335906e9e161ea05c1e3b83e09c48dad39e339106" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0dd2bc87c7fcf7532dc1d5c3d80e60dfee6b34eb04e608a1be02208713d29b33" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b8a34574acaef3e6020dfd25b1aae59ae2c40372536ecda98b04b6c124ef9fe1" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6a961fac3e2ed0fab59f69bccf186af6da85d8b10bc14b646803ea093a988ff9" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="39b4c467b61698857184d12a66d54c60bd5e9706d3dee66e635e9345299e4675" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="634a7ecc11ef881cef8bac6c58b7ad14a407067eba009534f06747cd867ed2fd" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="498924273d017f88c0016a800f5738d3ee0d5e626900cefbae31caa222435d52" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="e522d9bdf4c4441bf2f760d51cf50e81993562bdd582c32e9a897e0d96c946e6" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="15e7a1ebecb2ce206c5163626aa743f023cec7225c78f0512f24724bc214f9e8" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="6eeada104fcb870309636a25c45126f7c0ee21f522632d3a064ff2cc4ac2a192" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="2bf268d5972b8c629f301cb574af4b3bce31ff53fe432d5155c685c9fa982ac4" name="dbus-1" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="2508ba7bf0b1cc4b74a847be12b96684f601748bd15b50fc50850f59d798fb2a" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="d59e3bf816e45ae8205cc6f164d71328669b9f47a0af50c3d49a63a35de6dcda" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f9c5eec297b4aee4db48d3eb28264db078cd8a78cc6b7e3a9a7940d00963e8f2" name="dbus-1-devel" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="68cf212ca542a631deb5b562761f3f9bd6f404663438b6b76940ebf35ce61eb8" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="4b7fac95d79e0b7f80dcac9e9f09d87597aae0a5f837ac1228f6fafb97f427d0" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="485b04a82f537acb9b8038d5094fe89f5f0b804138bed4d2e6846db0023ef0cb" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="e0c06500bffd2995d83a8152094d5c8b35ba24a043d280a76c828d7e362e3e4c" name="dbus-1-x11" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="f40206f2853337ec2e9a3e031ca5608f46e35e9b9cc820765735e275024c5cd6" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="65b94bf4dee8d32d2683505492d9a5f153693a410a719d30fe0c69e2bf088c1c" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="18b5dfd97cd8414985376ca23fb7e2d526e1916ba712dc115ddff96dc23198ec" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ae464162ac1c4b139a8368d6390e603edc021c95a5db712218251e091e1c02e8" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="971c0b04f6e7fe4743b3bb2a06029527b7732776498fd8b1d528ccd437c30229" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="aeaf421d4ba86d85af77294e08bb469a703d85a036691e5e94be546229c47c8f" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="ae23dc0311ce52a33e58273be1c5b646e97a91d74c99599ae3871df22ced9f13" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="ed0f5ac636d5d02222e3b60b9455164a20e0387fef33a008a22d4bf9dd0a0a42" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="c0e544f0b37f73e5afc2e8516a28f816b86b80f7b2459fc70d212d0d92dfb6dd" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="d2f0a42e19a86998f6d02c718ec832dd5057c98a996a9aff43d0f94cf8686a96" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="949beae7caacee1b66f0ec4818e5a2dad5ebb2b8709c5b43a919e106ed18c5d7" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="4bd501d52ef5e29b1eceeb0523391970b3c4fda2a00e7d42ac7c0b0e7de853c7" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="5c8e260a360e7f9ff9d6292f1cbaa2b17cd483af3aa1cca6c97b47d705f214d3" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="bf5a79d7bc25ad8752f12752b41335bd770f50fd9656031c9195d0c1567c0084" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="963c48b2514a739206431fb90dcdf3e524c7aa26d655e81e095e91ff08b161a6" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="f85abf6b36344d026a40a856365b16a8237e503cc9e9ecb72e7cc43a8cb7ea12" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp151.2.6.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="1c31ee887d556e61183671dcb940d7afda0e7bd6c1d4d8aabd5b8b449df8b85c" name="dolphin" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="9ac027357bd64ca0bc63021e821dced3364b0352b01b4043ed4fdaa5c2fe4f37" name="dolphin" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="c08695f4caf251672431b777785a7c397ab8a1914df3a12f9e40711c7e9caef0" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="59693897581c1d7c6a3d576cb7498a3f0e0a3c228a7958f0e5e69209e30fb55a" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="91939757316edbaa82589a0b41cef9d41498833f2af931feaf927d9a8c75ccbd" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="06b407dc0885d4f309b6fcca9522ad45624ce426f40b60adccee3b169b3c49c4" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="cad1872f7c6e10bab20e8c53cea6ef025a117090c23997330e3ee080588f7f3e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="61f3ab47bd07ab7e00b00e94fd90a7c49fe5fe2317a4d814ee8d3a099a689e13" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="c70fcebd74d871a368432ea7184cd92ec7d6b8aa4f5839bfc81278889bd3f9dc" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="a2f4a1945a706c78b98d5a8b8c710f96431e8a37c66cd839833fff39fc8ff5b6" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="ee7402846b8aa3e769e0c961358d7337067966227fbb2814cc82a22cbf8b34f0" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="5a5b8190f279c51fd82e10b424aee7e5b0845cf4da376179f5e912fa5f84ca1b" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="45381c7af86b152bcb4cd949c60802be82d85cc2a23ef74f978417d4cbba56b0" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="2f7673ef2f024842a82fb5ca3887c3c53e9f328ecb9294e8e2efbee639e89b8a" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="7d3158a2294752d565e628d85411febea3d02c5b1613132148d981725b9df0f0" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- Move the example-config + mkcert.sh to /usr/share/dovecot
  This makes the files no longer documentation and they actually
  exist on e.g. our docker image, where rpms are installed without
  documentation. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1558353600">- bsc#1134242 - upgrade from 42.3 to 15.1: dovecot shows Unknown
  protocol 'SSLv2'
  * remove !SSLv2 from existing ssl_protocols configuration
    during upgrade</changelog>
</package>
<package pkgid="8ea183d6ff57e9db780b302e644efd71dae6cd0b305a70b409392ce0213f6b7e" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0137324c0c0cb10bdd0e9f8f6219cad68a3337d3d1b352a41d5d53c506ac6d86" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="c6da6575f7cab5f00095e85ae5d64f906ac29f372ff5900198b168d9d9596748" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="61a074642fe64bf83214b8df9f05b7e452b64c7f77595f7306785e30b349bcfd" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="eaa3e1b544ebfdce867e30d6a42acba50e22a3199553a5aa6d17f8484a84aad2" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="32ed27f31570522cde169d892a12d8c89fbf371cd3db6a21b42e38f8229336e0" name="elfutils" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b001feea2137533c046383b8fc5cf2e7bdc071bfa7ee4c08e8958f1db3ace3b3" name="elfutils" arch="src">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c9ea7f85e047502e2484292239fc33552e71f53758aaf79720e3a41cd0fa413e" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="c4fee0b9a6599939d6407c4895badb49cdef3db771645daeb87aac1b82500076" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="2ff118e024feedb8d8d03c3faef3d5042525bdc4518f4b2de5786e03a61f5b65" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="be84284d6f28f3079f1c7899840544e83273d720ffc91a244bf21cf3d597d6ae" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="d0b455c7a370725a1b28bf05e4cb654e9170f95d7a5e09b40cd12868b07c1667" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="78fc15f26f631f1f00ece0ebf8f471b2e52eb871af738bcce4d6ae06e585d495" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="a1597bd8b2182d39be94a1d8262edbbcbe2b2c98e5c8f7b37dce8309724be90d" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="aa10beab1a84b07af0a4c56380d1cbd02bc82c8b37c0d74084366339b77be387" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="db365e4518dc888b78fed9642ca5a2fa39f5e0d079520a0d6a56de320d0702b5" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="bbe71be91a279962e64f5c750ff0c8dc40f8881918f6fe28d7f5a66a009de6a5" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="c178a5c38c5ca42418a2d8d2628e5ad1f591c5495d39bd341dc706dfe3a18ae0" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="47eb414c66afaae382dcb3b0889b2afe1fc8e6d84eadb8eef38fe12214aa67b8" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="bc5244be8b0eda471f75aa360c4e4c3aa67068c78a5084af76a92dcb0bd7baca" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="57dbceee4e0cc6b1042d108c0f1ac5cea182544ad3ad0f1b4cf9eeaa632e6aa2" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="8eef4a8e27bd88d3d801ca1e2fcc923a4bac85335328b670daa629399d97098b" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="23dd2a82ba96ddf77afb13752109350d00fdd461ba7db9856e0f5022aa38d98e" name="evolution" arch="src">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="3f99ee876d30643890bbcb3a636dd47b8b77b9b92e9462a0f3e982f5146ebfcf" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="22072846526ad326755547efb5353aed3521a5e6660093ab9609ef9e20bef2c7" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="7d84e48ecc06f48cac395bef96a24c47844ea23561fb29db75490a4cf6d4f21c" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="c71397fb4c471f06f1f41da41f140713e403dc10bb01269d0967411049fda5e9" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="eaa6b4c5315be7bba1f998cd48ed83562613204df996470e99474f4f4eea6dcf" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="aab2f9a3311c7ed9bae54260ddc07509e609bfa138e4a8a709c0fd6f16b54a9e" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="2967959b2bb4c10e6c34676ae8d8eb7e21f15364cf8aec4864b9117b13bdade5" name="exempi" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="e1c88b812e972c57ab2f8da32f53748da82c39c9b1869009658357734cc4c112" name="exempi-tools" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="ddd718469a72f0f427f08bbc58dcec820911522f2ae87d5483e0478b1296b604" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="795a82f1413489cfccb1ac444f619a54068545effd8ca390e9fce4a833313717" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="c8b2063b7d0fbf855d3ef9dabe039d0004c51e29753084d62041d35b31081cca" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="e2582c287282a4b572d5009487f96625b71881247da2761f60c0444ace78ca75" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="ca289b93895f8d839ffbd6bb2cf066352b43ceacbdccc45fc7e5baf2e7058f2b" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="b61e3b572821ab0bb70a56756bfceeff46861c38413b7dc2f9fb710eb63d435f" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="eb6138614b251f82fe3dc6e97f8d371deae0abeb89682b4309c3575dc414f7f5" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="f74cd9ed7d4051871f4a1c06be8211e1a1d16f112532384014df57665e7259c6" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="2bb16f17936c6aa9476b4f1aa61e2a23380365e3bf9549bcc166104f7bc3fbcb" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp151.4.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="bccb91dffe0aaec0383b7965d8beac09527873a4efe3183f1e353203d52613e9" name="expat" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1eff234dae4e2e82d19af00ea4dea1936206f737ce7ea1573d82613d63750aea" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="5c835a1cfba21788fac7d7f292fcb3beb1c6f0bc41e6fc0aea447f08cc4a2861" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="3c0f9aaf345391a43dd2a85966e65d006e71c0fb34bb1552c49be975d2e60c12" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="8536e354aa599cef9a7bcf6a8874e30e502f27fbebb87401565146c817aeb696" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="e27130394fd3637af696ea29f6f016d79fffd8039ccb0e237bafb6d57291773b" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="8f231dc8cbcd35f531d5fd5b4f511c2ab19b9d17ed88c832997454211724273e" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
</package>
<package pkgid="97fc50bb695e881b26d785394ffa77ac2c8b425ab9d41f03641eff02c0562340" name="fping" arch="src">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="lrupp@suse.de" date="1202472000">- convert the Changelog to Unix
- add COPYING, remove INSTALL from docudir
- use macros
- build parallel</changelog>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="59863b4d31fcd729e47bfc15419c3542cb87f4df5f781d31f760b2cb4ce9b19b" name="fping" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="e541b9c954526d796d940538baa9848a7d82876e8791f2fcf75a87ecc16b0923" name="gd" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="12b248b041366d1da9f71458f24e5e407c643ad3870e682fd46153e4296a5459" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="28489cd8e5248ea9338b1543ba9a3208af21236b7035d6ac31cdf89dc3fae1d0" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="1090897552113b51b7b0e569f5f9cd0af323cc3d97b744ed781b389de0a37cae" name="gd-devel" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="fbb6394a90d6b3ae8e05562f87db77824d2d2c4c70edfb702dfd7fab745e8379" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="de3d211cfa6cd463a4c6f8d335342682bf41ffcfb509fa6f46d9c72b94a1f09c" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="c5885293709df48af92336e83c980100f757dbad1ecbedb004e8d4fc23feed6e" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="2dfc335768a87448de5f1442d433700059d6ec9c63cdfc9fa6c42b1e12f7d266" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="4aa108d06ba8f8c0985a8a5bc25d5b47ca0fa1ffc5c735be7dddc5c4de82a37b" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="ddf94ff17a32df05633ce8bff369a1fad654e67843d47f93bd4cc026a2f4d2e4" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="dfc6fb8f8c101cc76a4f8fff2760975b96cbaf69f483cde00b6ec5a8fb3d438e" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="636f49ca2154136bd76ab0df9134011044939f1ab392755a8c39c6a860e52385" name="gettext-its-gtk3" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9ff04fa1cd2185521e8739d5e181b7dff0c4fdad4fe6794f59d6ae4bf3133bbc" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="b8b038454def2c0442c50a382504cf70c2e1bf3b2fc6111837e583fcad5ab6dc" name="gettext-its-gtk3" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="8548c1d34bb3dce59ecdb4b7b5ae293eb9fbf4cd1080b1369f52973e16aaa88c" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="7cd1c2f80ec252a82e7d7374f796f2b5260fa7bbdc403b0396aa8cb44059d0ba" name="gitlint" arch="src">
  <version epoch="0" ver="0.11.0" rel="lp151.3.3.1"/>
  <changelog author="okurz@suse.com" date="1489060800">- Initial submission</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Install LICENSE as well
- Use update alternatives
- Drop parts of description which are not relevant to package</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562068800">- Update to v0.11.0
  * add relax-requirements.patch to make it work with openSUSE</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562241600">- Correct download target URL and fix relax-requirements.patch</changelog>
</package>
<package pkgid="5c05aa3f33ee5acf0cc0f4f12b15d7bacb3833374a42df6f04d995b9b948c510" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="cb2d24bce9996698c3a031be72844273763f0b80ac9a96e795f11de8abc64e01" name="glib-networking" arch="i586">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="17a9cb4bee9352420567767d1a50217ef8911033b00c7010122dbf037bb28639" name="glib-networking" arch="src">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="051bef8b0965a26fb7551e62e2b72e8670c77596ace9150f2581f1dde565b97a" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="6a6cffc4c9f023efcb22d8a0d6b39e62568e5d17038fbe12b931b53693961bbc" name="glib-networking-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="fe1aba1e62f5ae3635acb0784de3891b4c0b3d36d697880b6f86a2212579ac9a" name="glib-networking-lang" arch="noarch">
  <version epoch="0" ver="2.54.1" rel="lp151.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="ec68bc02b0497bce63453374c73038cc4efad0f8b7cfc5c528610522ec437376" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="4bbd692efba1fa9d88f67986463626bdb075923cb72f63aa487a3bd4bbf086f6" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="e59fd5f88c4904e460f9628fc3a645f4803b0fbcbb58b172d1890893c8ad1cea" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="8237899868595925e9685712f748dddc0a3806fe4a9557f392e3a4b0846da35c" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="8166322447e8de6247b28e00e4968d0733a56137c1a1ebcf0e4573bcf62b4aa3" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="26ee5582b0b0cf688ca36d66f648feb0c0e7fe747e8c1c2eb4f5d1461e3e27bf" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="2bf1e049014ad23e09d51ca8b777d28e29bc1d2fbe9380dd1aa7f558ad9e76ed" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.9.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="4fa9abdfa87bbe1999334886e68b6f1ab40e4aa6332cab7bd5c8d5e57b5733c0" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="2bb9a73809696682f7d29525f2bb993c7b374eb92e4077237a0425b62e50f286" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="dc11df0095b2336e363763daa2c53c0700663027fa0589d3ac6a4dda8e60593b" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="80fa96b7c783c7e440e7e12c1baa0a5a0a33786ad6f4ea4e17363823f7037c57" name="gnome-settings-daemon-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="8ce116f88e141159a12b5d94edefde658f19b92de15f603660d9b2d3398c684b" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="fdff768d27477edcc71e1340a058bd1cdfd7b2bdb4efe4d62653dd1e9a107c97" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="766c605fc8d1eb59cb1df2ab3cebf8151899cda5f4df3ee7b23943f4330962f4" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="ea1547392d2625944d1a08abac771f1d36eac7d8b18e4ee21956fd2f92e7a41e" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="3a160d04dd4f0109cb714921e83ccc8c83fa5876b85c3981c53aca0a2ba55132" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="9d026d34d47b2d0687864a683eaea29dfce3208b6845561f742d346c907e2de8" name="gnome-shell-classic-session" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="7e4941fd9387f4c4ffb8546044a2436768b9bdd74d50e47d83c2da47f9e7badc" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="b02749035a366a54ef537f999404fabb1e91f07464c40a9f7eabb2d0b35dcd47" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="32b62264e0cdd5712e98afe93f8d44c6f4a7705eb03c7f3fa83cd3724fc4b62c" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="39cb55b054570b04d23be518dc51de577e8bd74b2e8153f07e9b754c427bb1aa" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp151.8.3.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="f7eb1ba4b91146d9b4fb86726ea251d7f45e73cdbc4ffc2e58fdadf671c6d323" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp151.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="adb6ce0e604d6044666d0265393adab090c5a17190351d91f563d96f6286b560" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
</package>
<package pkgid="e4ca808a1069b85809e5b4abc6153bda75fea5b943599cf511b576f9213b4ec0" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.4.1" rel="lp151.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1544184000">- New version 3.4.0
  * The GNU Health Federation model
  * Thalamus message server
  * New Health Information System (on MongoDB)
  * Person Master Index
  * MongoDB support (on the HIS)
  * Updated UniprotKB database with over 30K protein natural variants
  * Contextualized information on genetics and social determinants
  * Genetic and family history and environmental factors integrated to
    the Page of Life and Federation The GNU Health Book of Life
  * Tryton 4.6 integration on the HMIS node</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546084800">- gnuhealth-webdav service adapted to new GH webdav server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1551355200">- add dependency for bsdtar (gnuhealth-control changed)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1552219200">- version 3.4.1 various bugfixes, e.g.
  bug #55594: Traceback when creating a person without a system institution
  bug #55595: Remove unimplemented functionality fields from Federation Country</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- gnuhealth-control changed to version 3.4.1
  * use bsdtar (can handle zip files, tar can't)</changelog>
</package>
<package pkgid="e2796171ef9d6f621a16eec10a1bb79addf5baefdcd925c0ccbe9aba8f2fcb5e" name="gnutls" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="d8f67c54783a6d2408ced697f2953e94c7a17920d5d2b5bc8be96ab33ae34885" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="e9e898f643f3bdf0dfa89edf72989e116061e5cf0eadc8220bbdf3abe274e997" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="8b532fc63be876381aa01602344c0e7f3f36334d18a397c62659bec104626870" name="gnutls-guile" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="86e321f4a496660311f1d8dcf71107e432184d4df164ffeac5e1a01150012612" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b0b184fc82ac8948419e96cb5bbfef192ef58527ffa32425656804b9168a88d1" name="go" arch="i586">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="f5000884dd2a242589ff99c547203964609435eb942c5fbe4560c3d555dfadda" name="go" arch="src">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="0ff6ae86a9c9d3cc8d3d090cc98648ef74a35e753ae7d4e4fa8a9374b6e92cf0" name="go" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="447203092f4012290f4001f81c4e02a689989d5ff6f9b4c1c7787895a26de7c8" name="go-doc" arch="i586">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="aae7b3bfcd69a2e461f88015763484be3cdc6e701bd40c0f3de2749b0dadc5c0" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="1366eca02ef234dde0818f7e2f061e8442b6081cd7f452b0d5e6af7ca41c1508" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp151.2.3.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="9c5ecc621d7ca19a41fb72ea1de08f37c4d2b2798fd2c4117f86755d406a3d81" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="99377466a4771520ab9e8ba5ad08f0dd0c221e0e77de9c110a79ddbb1835f036" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="b78f741aa0f3acb5bc0eb5ee9fa621e75e259dceef722e3ea7705d3b29ce4ad5" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="3c429d8e0fc414a96c9e4942e875cc4bf39e079bb9655ca8aaac2b03dd41c98c" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="1d64bad183e7734ca24337442d05a9e46a41971e9addad8dbfcf3019ef40b5c1" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="4ac8446e3b28bf52deb1a779dce4f9c6cc4d1f6bcea5131f1137b5705f60f9b6" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="0f103bdf4a38fe5d1c18ecab8d7183b18e95f489918cb755e516d516d4668bf2" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="ba393a3b4543eb930ec39da6a4104d488eda50d13f5e77cf72d5cac26a1969f1" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp151.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="06825e732640807d7f2ae6b0c19dfd72c79c7ccb661b9234ac19b81fd456f949" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="09bf9a1f1867a10b3a55642b784578dec1727f060adbca782aa33f1a1214f3d7" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp151.2.3.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="1cd51d29ba7b54b0d5ebb61debc55e0d792ea8e61909e07151eaaeed93853f9a" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="17915d5ae5d9f99197c9084615f40686ec479c674375df73137d3b412b9cfcb4" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="707c41684c89d308195341b10ada993cf8f193e72d9e174078c6f3efa7c197d5" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="ff18ecabd64f39e95d28584cdeb6bc7057a633d3ab5c1db54534d172d97a25fa" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="4dffd0d3ae96d7dc4cf98df9392820b8501b360ea2a05c2543dd8d75bfcd4d59" name="google-compute-engine-oslogin" arch="i586">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="9e7b0927d70503b0b6237d90a9c4a41b0f3029afc17ecebc2a3248279cfb3685" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="ffe445cc5de0e56a848ec9a405aa1f85990f5febd05f54ad0d9d4158da96899c" name="google-compute-engine-oslogin" arch="i586">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="f71158489c979ccd0ce35fd8339aff6d877ad0c8b975a81fc9274adac46c75b7" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="0165b346a635d8f87de0f9665471daa92c0fdae30476067d702f295794763009" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20190416" rel="lp151.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="920d0090f854e75a9915f30956b95aff2140c1a51dd3af8980ff45c9987135fe" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20190522" rel="lp151.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="e0a83f59d994c6345278770fa98c2bfa00b7c55af239b610ed4d172f1e13a346" name="graphviz" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="062c8bfee529b61c52a7d8020c044501b1952e0a7101ee183a28a30600ffee78" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="03029f74d44d0062f631022bf95e3006d34cf3929c85990a3a22889b862d8f1e" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0f99c307c88635c98bc8a3fef432ed76ca4a4c3604402259ad3241211e25bf78" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="7c0a7ca5d1b64179e5e05978ea2480afaeb9c2c9aca336cdf7c7439c77d38273" name="graphviz-devel" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="b6e85514df0a1278730905aeb7286da570dbc5c6de9e39cdba5060fe292280a4" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5a0e641848e4fa1d534fe776324e5b273660b55b7f6c3029f230da6bbf1ac421" name="graphviz-doc" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="470eb8d28b40b5be91cb618c3d64a886bf55e9224b2266603b09bc76e3dadfa8" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="89faa4a804f5e8e2faa4f49bb4d7bc1ad8d83c7c6e20309bda08b5e6d6c6ad5e" name="graphviz-gd" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="78226517fc430fbfb276b6e65224e9d5e9b139748bb23686f1a0c76301a33a67" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f3fe7bccac2a79d013762d28a5c378cc55ffc456e8f27bcc45d76efbfcb02406" name="graphviz-gnome" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0ad9eee6efd631d9ed442a271e89d6e790c4cdf95051059f5b879588539512ef" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="d2d6e4cec78210d76db06acefbe9ce80d43eb5059739f2f34c809ae825f3bcbb" name="graphviz-guile" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a0a7bf0e24562aa4c6ff6cfad7c538f6ac201fb392a2af29fbd01ce253505c3d" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="bd23243df5865ebd12f97db8e7e5dbcf6973cc83dbeef3769f5ca7a18873e9eb" name="graphviz-gvedit" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="874834c3b6b18719da821baf8b8f30a23931fe53259baeeb29616191aa235bf5" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ba94a7f6cc93746b98b4796b9e7a2969707faab5b0e877f126c02d41fabb16c8" name="graphviz-java" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3c14de4f7e9fe21ec8142030cd964c2147cc75c06f62ccdf0518b5977c52560d" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0c7e5ae2d3095f4309ed6391bd157511deb7b623493c6567608e9c0e038e53ac" name="graphviz-lua" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="332ba014ef02df1cf0f518476058c58ac02dfe425f18f8b80233e1ea796e2380" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0365fe3b5db7c93b9b6fcc5a67ed64cd98fab225f39f667c47841366138a44b7" name="graphviz-perl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3a1366be9466a59084319accc34679b4b7ee33bfa59f03ecc8921c8624169cd0" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="7588d55e021f5500db987dd401e44edadf81b673bb8dd87f0ad0a6fbf4d0a3c8" name="graphviz-php" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="437be83337924eed2873acd6378d7e125722580bc9bdbf111a11a7981de97a6e" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="2a24c42b00d8b7b05f8f82678f3de7459c9c345be29cecf5f88b242842aa2272" name="graphviz-plugins-core" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="767728facbb08eef2307834c9ef0a23abd271978b565b101e4774fbafde340a9" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="79e84a404a0236c5fa3a4b07c7c9427d11215e111d71be8765e78566c72e7422" name="graphviz-python" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="22e335d09685128f073ac42495b25c1764fea560be386aa0523e99a7426dd033" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="be6c432a2d67ce2d41dbcca5876bcd26eda15643c0b342a212076e857e38d1c6" name="graphviz-ruby" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="07d487bbdc1990669b7490a7c94d954175d972c2b9d8f2b376d140234689e3b3" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="57217ed38c63e641b968477b6e1ad887eb1408ab83a27c245e238c6c4255d19d" name="graphviz-smyrna" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="da0febd61c95e66616d68af27eda9c9aed4212fc192fcc0b546e0da89b24b876" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="64837022186b16d9835403d0d95e5eb9a350fd881409a299b4ed8f28562452ac" name="graphviz-tcl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a453e03a825787a57d84cba895d4616a4eb8a092de1a687273832a33bcacd372" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a518792a843d9aae5bd090709fc2ca3c81992794bc85f553b145dc3a5726562b" name="grub2" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="82eacbaf39632067bac74f5a6541ac9c805bbe28723d7f7b060cda96da42153f" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="3fe606070f9bacb533236c41f8fc609eedccbddf567c864409af1802224aef0b" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="0c2a9841ef9feb28176854123638f53e5db2816aca53821706c6fd133028a7d2" name="grub2" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4e20c6e58e76d437a7dd74c662825cce3c1f87845be18d7066d069bcd4c501ed" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c251452896fd8c65c6f6d7bb268096ec3f5ab7675a1b455d0a9d8de72ee90548" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c132378b4bbc5f74fb998e06272bfde495b97091eb8ee9363e5c69aa310e93e5" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="5ed01258de4396e76ac8f3e8a89c9056abd73080185380869ec27b24de26d90d" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="f43bcd236b1fe40b05f22862a731863169edc0e099714d5217760f9f12620807" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="3ea9b0da0de70ee64239e91cf06f11a571bd273dd1978c0b940d89014463153a" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="ec8a3375280caaa50eede2e105ab009673abc88d36a26ba6c7cf6fd8550051b4" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="162ebbfc1c1a2a037d8082473ce7e14d638eaaa390c6991f26539dacecb0ddaa" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="975c179976e1ffcccf04de50c8ea0aa1cf60b9f606890c1801b265fe69f43a8d" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="e293ab21c9f14179c3679c741ac660b82b6182c3019d1b0c927b0b4f31ebef6c" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4467bc5f061215037a2bffc8280da2a22439b574f1a6e6313cd449f3b1636b3a" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="3be461e3d9580aa4b18986f573bd2edf7c4ab3fdd0a1a2dc5b57438413cbec83" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="a570f4d2a8f14918b18c4572709fd7df65b6090d3223a7b1d96549a712e939f3" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="ef25ffc690d4d19b57af3269a6e6e1ee11499d0d99234c3fcb6e24aae20511a5" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c986e74b0b4e0cee453151c3aed7d6067014e35d54911fb878cb231f435a0914" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="1e91434d1264998f8770a8a3a496ea465521544a9255bce8e0e471b818dc2ff7" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4f8320dd32c784aa4b2bc6fd91acd118ab13a49122070ab70eca93fd2e32d956" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="2a6b8f55ed61728524b5cc4be66fbce7909b749161e491f7702e6939ff310a94" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="fb9d89061fd2f35b9fcd3512f31093cdcd557d50025144053992bdd75080131e" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.3.1"/>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="40d16dd75ab1393aa8d77e4b80ded2a38a8a72218863382352e1c4154dd39a6a" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp151.21.6.1"/>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang@suse.com" date="1538568000">- Translate caret back to space as the initrd stanza could use space to
  delimit multiple files loaded (bsc#1101942)
  * grub2-util-30_os-prober-multiple-initrd.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1545307200">- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch</changelog>
  <changelog author="rw@suse.com" date="1548244800">- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)</changelog>
  <changelog author="mchang@suse.com" date="1548331200">- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch</changelog>
  <changelog author="mchang@suse.com" date="1548417600">- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548417601">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548676800">- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)</changelog>
  <changelog author="mchang@suse.com" date="1549972800">- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (bsc#1123942)</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996801">- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1560513600">- Avoid high resolution when trying to keep current mode (bsc#1133842)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="477e0369dbc96fda0a77df4c4aedf68efc6ade0eb4a81d4518573f8c0b4068d4" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c93e5abd0dbab16528df61e5fed16f02f4a1156b48be1ecc44d3a60faa6f1b27" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="39e1a6a0a864e42fd512c8afb29154d549556070579ffcb5979602e0f9fd7426" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="7fede0f3a1e47e86fcf4a970a39d213604beb6bbf5ceffd22bd3805c7e7109db" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="92ac9bee234aba090317c187d4819576a3e553b78094270f4a3c788f8d3cebee" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="39e651f412b8d17457215fe9b6bbaf2a276223261c197754e2be0ee5aa340870" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="02b32cfcedcc2a2cc6a05c8fe0e31fdbd84b890df7cc0868aba492acee6278bc" name="gtk3-devel" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5b3e845663f44b6e5bffe29727c37aeb8f4e576bd52745de89831ede822c61c1" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5eabc5bdfa0bf54b3fc7dbcc1615815b4ee19279571405169f757b1b7dad6e48" name="gtk3-devel" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ce5e98de4601cbd8dadcd76e5c7586707279e738680ad55ffb6a65a87bead55e" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="b20db370ad1fc1357e2039cc6feea44ba3ea362ea42fe28b6e519c6f061a1970" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c85c85e22b33de693b4f9261f99d2b25933b8ac2c2eaa526fb6a1e0ccb39bd1a" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f884e5d81bebf41a151c56b62564c5b2c257b841fdb95ec5160d9efcdbf4026f" name="gtk3-immodule-amharic" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="57784439ca6304d00279501e39a515f6b993412516cabc783f4b8cc119af0458" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9fff3029beaae44c77c49b495490685e17ce66578cea7ec2302c217c3b720090" name="gtk3-immodule-amharic" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="c4e13e46bdf0ce3c6ecbbc073a91b57b739b5a905f2e09a17288d3b768e169ce" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="df2946ac84932277510c2588ee421f7eee017719ba582e238afe4b1e1af7cdc7" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="3b1866f1da92b8ef2283359b82315d5d688cd4e0d5bbd35fb53104d3fc85b2a7" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="761879513e446f9b0a0b6402f1b9858c16b7104517096cae35e5586857e2b50c" name="gtk3-immodule-broadway" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="8f730614df60c1fb951f5de7ab4dcf1bb8ced127840d3c4239e051dd5f209267" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="2f827ce269346253a486c903afe123e52caaef19444996dbda4d480a71313fa0" name="gtk3-immodule-broadway" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="b686231fcde78a7c4565b389a47ddce6654d32316cce522383f2bea9b3eb69fe" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="2e56722a37087864014e52e703cb5dd31583c447ced13b1d14aff1021f46858e" name="gtk3-immodule-inuktitut" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="8364417e445730722d72d1b66b75073e6a0b80dd1fa953b58f75b85e28a1c609" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="3199c78cfe1759905f2a636a0572db3a86c4cf17ecac2f82615bc9517249d2ba" name="gtk3-immodule-inuktitut" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="31abea27cd9bb11d7e46fb357106e613c8e4a90df245effff6d5dd2aa9d49ac0" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="86477924fed8be364526f711c89559680c1268dd8466b5b10a56cdb3f0a4dd65" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c16d262ed5e6ba7b1fedefbc639036f910756a11bea9be74e2c789bf04a06ee0" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="231eab7bda52d16bb9a0c19e50cc7ba7b01a7722e1f4bd750209c7ed89203540" name="gtk3-immodule-multipress" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5a31b7b5594fe452d0ddbacb0fcf32462bc31ee83d34d125aaa10d29ae73ea45" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="0e4a9c2ebc3baed3def960aec057c93d4228ef96450c1b4ce4079c71c263d835" name="gtk3-immodule-multipress" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="e507c186b62e1cdc372c42ed0ae987b233beb2d402922919b67c90f234b63bc6" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="28e52c8c9193b384d400725954e9e2c61370f65fbe741b34f438a4f7ac719a6c" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d4ed68cf2cc9de94fe04c4955a8d6de3a42e376715096b1978ef2e4543dd8c1d" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="42616fd9b248004e35a0af241c9ee432d5bb3c35a37b495d54c5dad141f501b8" name="gtk3-immodule-thai" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="69064a8230634b4dd15451898c18ee45893dc7d16b743ae57381244e6218c75c" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d929bcdbe77cf11bca3a4566cc08db84b4f817943f82afab073f67014356a929" name="gtk3-immodule-thai" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1702b96796e43ebc6f379413be0e2bb8dc462c0c0ca4739854711240331455d6" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="23cca7ac363e8573151a50ecd21cf94c9d800e0fe53f80d4db2affa2b3977b1c" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="fd2f0d7f815430899a5e344dc4d9072d39032dff7c5a5cb1286d43a8190e7115" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="45000389a393bb159b35296e3be44320108c3e536c9c98d3baf78f544f88b0ed" name="gtk3-immodule-vietnamese" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="a1832ca0d03401a4c8a563662b814f265f950cb6f8e1261ee480658c54574b5e" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d8718c9b5d0de8b42ecda8270e86becd498b727e9a6072462cec66d9b68da5ac" name="gtk3-immodule-vietnamese" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="31cd0ac0e2b97d9cd52738f94a3a32e2377677922afa006a1772c9fe77bd7b4b" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="6d226d7ef6bce344a5c53dcab6a15104163c77d42b6beb21b34f4064dd6d3572" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="7ec7f7d9c6dfb097e574b78f9109c09d4af8d0e1504bfe80024a75514948f4a9" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4bfe497ac269b1585eddb0d2adf93c5021064761f9d13bd1587d9d1f5df6d628" name="gtk3-immodule-xim" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="24022c5b067d15553d88ef505d779c5a0168851e82e0550151d4360a658c268e" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="1e2a8591a715ee60986b5bd938cbab26b15b4dc9325621e5b07d834b6f05764b" name="gtk3-immodule-xim" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4b622fc4d28ccb9190789795b3c67cd1ba6206609bf46de654764070b3072c03" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="e18dce1b19ab17719ab90f924be766e2d8c4a0650119a22c93d070a912eaa843" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="17b02942b91d55ac3433d0eb3b5d948491bb55e0abe4c1114a0b1476bf39ba4e" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="a6f66a6486956e2cf3f1c3be02931099f351410ac081b35941d21c58409b8a9f" name="gtk3-immodules-tigrigna" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="fa853ea87fdca92b5cfdd564831ab102b525b40aa0eaadc03160689e8e53e2b5" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="40b328d3b6b49d8423953d55fbdfc0e7a653b6f91881d2a2f9d88fb36443d352" name="gtk3-immodules-tigrigna" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="7708f83e1d9afa375b7eee9597426dbbe2fe508751d022aa1fdd97e2ec5af02e" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1ecbcccdb2819daa243e114d71f4e815a99b3e95d8c616163e5e5eca0aedff60" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d38f79fed3ed0bc2fc927a21b876436c8709ee094459f1e948fa1cfa8ef3b481" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="4f47a5fe208883dff63c7f5d217c68f5a297411601d192d439629628c6a75a25" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9f891f7de5a618fb66dfb33b33884e575cd47b3c07ee071a75f2d73bfb89295a" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f213e3b6c6b6e91f69c42ec83eb8627fb0c1d8d4311b993b0f03e3c94219b4b8" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9d95ab1629b20d7b0867050ad7912ae98a4a5a7ef5b3123964ea2650160756dc" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="909e82b739e7b8d686ff824870a9a399290ae9167ca7dd0d8bac6cbf926754ac" name="gtk3-tools" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9eb583a9dbceb44b049f070f0a0338591bb8a278355264dfeb6fb923998dc4eb" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="5caaedb5504aee01577d833cb200105b44f8d6f5a5509f0903c570089046f694" name="gtk3-tools" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1325a959518630d49ece7e65c3865476fc7cf0c21c257d752f6e820e74c4822e" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="57e0fafb0bd5cc062143af04059551847339e6e7f7a5f4facc1fa64497589568" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="a947164d3c62e97d5efdf2a99f0a6ea21db717636324a66728fb3492220fc35e" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="222b227581a3371e124823162ef8d644827a8fe6dea140eceef11bfdb7adcb69" name="guake" arch="noarch">
  <version epoch="0" ver="3.6.3" rel="lp151.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1528027200">- Update to version 3.2.2:
  * Fix transparency regression on ubuntu composite
    (gh#Guake/guake#1333).
  * Fix transparency issue.
  * Fix right-click on link.
  * Fix bad css override on check tab background
    (gh#Guake/guake#1326).
  * Fix Guake application icon not displayed with German locale.
  * Fix ctrl+click on hyperlinks on VTE 0.50
    (gh#Guake/guake#1295).
  * Fixed "Gruvbox Dark" color palette (swapped foreground and
    background).
  * Swapped foreground and background colors for palettes added in
    commit #58842e9.
  * Add option groupes to the bootstrap scripts.</changelog>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.3.0:
  * Wayland is a bit more well supported. The X11 backend is now
    used by default for GDK and it seems to make the shortcut
    works under most situation.
  * A new command has been added: guake-toggle, should be faster
    than guake -t. You can use it when you register the global
    shortcut manually (X11 or Wayland).</changelog>
  <changelog author="badshah400@gmail.com" date="1532347200">- Update to version 3.3.2:
  * Travis build cleaned build artifacts before deployment,
    leading to missing files when built in the CI.
- Changesn from version 3.3.1:
  * Don't translate application icon (this finally fixes Guake
    application icon not being displayed with German locale, which
    was only partially resolved with gh#Guake/guake#1320)
  * Install of Guake through pip install was broken; fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
  <changelog author="badshah400@gmail.com" date="1538654400">- Update to version 3.4.0:
  * Split and resize terminals via mouse or keyboard shortcuts.
  * "New terminal" / "Rename terminal" / "Close terminal" items
    has been removed from the terminal context menu. They are
    still available on the tab context menu.
  * Fix multiline selection right click (gh#Guake/guake#1413).
  * Fix tab name (gh#Guake/guake#1017).
  * fixes jumping preference window (gh#Guake/guake#1149).
  * fix no focus after closing a split terminal
    (gh#Guake/guake#1421).
  * Add note about shell that does not support --login parameter
    (gh#Guake/guake#469).
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556020800">- Update to version 3.5.0:
  * new hotkey (CTRL+SHIFT+H) to open new tab in home directory
  * "New tab" button (gh#Guake/guake#1471)
  * Open new tab by double-clicking on the tab bar
  * Add new context menu on the notebook
  * Add a CLI option to change palette scheme
    (gh#Guake/guake#1345)
  * Bold text is also bright (&gt;= VTE 0.52 only)
  * guake --split-vertical and --split-horizontal split the
    current
  * tab just like the context menu does
  * Optional close buttons for tabs (disabled by default)
  * Guake can now provide a set of tabs per workspace
  * Reverse transparency slider to be more meaningful
    (gh#Guake/guake#1501)
  * Fix command-line select tab behavior (gh#Guake/guake#1492)
  * removed duplicate event bind? previously I had issue where
    quick-open event would be fired twice because of this.
  * fix settings only applied to the active workspace if more the
    1 is used
  * fix prompt quit dialog numbers when more then 1 workspace is
    used
  * Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1556539200">- Update to 3.6.1:
  * new feature: search in current terminal
  * new feature: session saving
  * new feature: settings export and import
  * various fixes to the core
  * minor build system fixes
  * translation updates</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1558008000">- Update to version 3.6.3:
  * Add drag-n-drop to terminal (text &amp; uris)
  * When scrolling with "shift" (1 page) or "shift + ctrl" (4
    pages) it will be faster (gh#Guake/guake#271)
  * Add schema_version check for tabs session restore
  * Add save/restore terminal split for tabs session -
    Save/Restore terminal split by pre-order traversal full binary
    tree in list
  * Bump tabs session schema_version to 2 (to support terminal
    split)
  * Lazy restore terminal split until Guake is visible
  * Manage terminal signal handler by handler_ids
  * Avoid spurious resize event when showing fullscreened window
  * Make sure workspace-specific-tab-sets only enable on X11
    backend (due to wnck)
  * Add install/uninstall-dev-locale to support dev locale
  * Fix DualTerminalBox grab focus when remove dead child
  * Support customize prefix for make
  * Fix re-focus on terminal after rename dialog destroy
  * Fix split terminal by menu will not follow last terminal cwd
    (if option set)
  * Fix delete_shell using os.waitpid (should not use it)</changelog>
</package>
<package pkgid="4baa23db9d7ddfd2816e89292b57583e20279e4339184c07ee6355143a6a9b2b" name="guake" arch="src">
  <version epoch="0" ver="3.6.3" rel="lp151.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1528027200">- Update to version 3.2.2:
  * Fix transparency regression on ubuntu composite
    (gh#Guake/guake#1333).
  * Fix transparency issue.
  * Fix right-click on link.
  * Fix bad css override on check tab background
    (gh#Guake/guake#1326).
  * Fix Guake application icon not displayed with German locale.
  * Fix ctrl+click on hyperlinks on VTE 0.50
    (gh#Guake/guake#1295).
  * Fixed "Gruvbox Dark" color palette (swapped foreground and
    background).
  * Swapped foreground and background colors for palettes added in
    commit #58842e9.
  * Add option groupes to the bootstrap scripts.</changelog>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.3.0:
  * Wayland is a bit more well supported. The X11 backend is now
    used by default for GDK and it seems to make the shortcut
    works under most situation.
  * A new command has been added: guake-toggle, should be faster
    than guake -t. You can use it when you register the global
    shortcut manually (X11 or Wayland).</changelog>
  <changelog author="badshah400@gmail.com" date="1532347200">- Update to version 3.3.2:
  * Travis build cleaned build artifacts before deployment,
    leading to missing files when built in the CI.
- Changesn from version 3.3.1:
  * Don't translate application icon (this finally fixes Guake
    application icon not being displayed with German locale, which
    was only partially resolved with gh#Guake/guake#1320)
  * Install of Guake through pip install was broken; fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
  <changelog author="badshah400@gmail.com" date="1538654400">- Update to version 3.4.0:
  * Split and resize terminals via mouse or keyboard shortcuts.
  * "New terminal" / "Rename terminal" / "Close terminal" items
    has been removed from the terminal context menu. They are
    still available on the tab context menu.
  * Fix multiline selection right click (gh#Guake/guake#1413).
  * Fix tab name (gh#Guake/guake#1017).
  * fixes jumping preference window (gh#Guake/guake#1149).
  * fix no focus after closing a split terminal
    (gh#Guake/guake#1421).
  * Add note about shell that does not support --login parameter
    (gh#Guake/guake#469).
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556020800">- Update to version 3.5.0:
  * new hotkey (CTRL+SHIFT+H) to open new tab in home directory
  * "New tab" button (gh#Guake/guake#1471)
  * Open new tab by double-clicking on the tab bar
  * Add new context menu on the notebook
  * Add a CLI option to change palette scheme
    (gh#Guake/guake#1345)
  * Bold text is also bright (&gt;= VTE 0.52 only)
  * guake --split-vertical and --split-horizontal split the
    current
  * tab just like the context menu does
  * Optional close buttons for tabs (disabled by default)
  * Guake can now provide a set of tabs per workspace
  * Reverse transparency slider to be more meaningful
    (gh#Guake/guake#1501)
  * Fix command-line select tab behavior (gh#Guake/guake#1492)
  * removed duplicate event bind? previously I had issue where
    quick-open event would be fired twice because of this.
  * fix settings only applied to the active workspace if more the
    1 is used
  * fix prompt quit dialog numbers when more then 1 workspace is
    used
  * Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1556539200">- Update to 3.6.1:
  * new feature: search in current terminal
  * new feature: session saving
  * new feature: settings export and import
  * various fixes to the core
  * minor build system fixes
  * translation updates</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1558008000">- Update to version 3.6.3:
  * Add drag-n-drop to terminal (text &amp; uris)
  * When scrolling with "shift" (1 page) or "shift + ctrl" (4
    pages) it will be faster (gh#Guake/guake#271)
  * Add schema_version check for tabs session restore
  * Add save/restore terminal split for tabs session -
    Save/Restore terminal split by pre-order traversal full binary
    tree in list
  * Bump tabs session schema_version to 2 (to support terminal
    split)
  * Lazy restore terminal split until Guake is visible
  * Manage terminal signal handler by handler_ids
  * Avoid spurious resize event when showing fullscreened window
  * Make sure workspace-specific-tab-sets only enable on X11
    backend (due to wnck)
  * Add install/uninstall-dev-locale to support dev locale
  * Fix DualTerminalBox grab focus when remove dead child
  * Support customize prefix for make
  * Fix re-focus on terminal after rename dialog destroy
  * Fix split terminal by menu will not follow last terminal cwd
    (if option set)
  * Fix delete_shell using os.waitpid (should not use it)</changelog>
</package>
<package pkgid="176e5f2ee07955dd38ec2d92e84233792df8eeef00952b8bbefe2a7171bf0a77" name="guestfs-data" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="52b97a30c3b926080dc9843fcd9eab503c61e023a9d543ac67491429dcd96710" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="7c8fb83f65fbe6a754c46c0839f4197b959dc2d3c3ba3e821da71da4923e37f3" name="guestfsd" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="d01852e779ef746ddc4e14647e53be20bdff4363a297137fd054f2943dd4ded5" name="gvfs" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="12c6e919d4bf6869341b4aec52247ce431de96095b9b75f0ef507f8cd16bfcb6" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="d909e31df32527d2f2bfce0f28dee21a5030d30df0f14ababf1830c524b39529" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8006e8d3618ef8fcb755bbc950722f27d33c4c0dfe1168fb97c2624cf66416db" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="1619b5dbac2e6d9c9824be77fbb6dd386fed4a7d3d46e42126569d270a34a1f1" name="gvfs-backend-afc" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="d201ca8ff3befdc0af7fa900bdc5d78bbc1f555c55b5a6e68628e34753ac43b1" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ea66c2d86ac862444bb0823051f8a49e7fb29b7d1d8a13abca100c5ea29abab9" name="gvfs-backend-samba" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ae483d132f188ac5f46ddfda95220d142d3960859b6c1c813008cc9a8a0beacc" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="821f82194e376ebe686885090a3aa82661ead59adf3560d4fc9e15b4ce5e89e4" name="gvfs-backends" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8e033abca28816c018279f2fb996c9308db79e9971be0dc032383c7fd0405b5f" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="8498fc0cfdfefacd1b1e1593d52b2af27aa534834d89c05792b9886c4142e554" name="gvfs-devel" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="351fd3b62c14ecd3abe15d47cb2e9c8b0167463e4c9bc22dbdb6059ac4c5d196" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="ed7ad80766bd278bcac6f32e9aafa47997048f8672418ad9a052d54ef5059893" name="gvfs-fuse" arch="i586">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="29b9fbdd9f4493b8b0e59940ee3cda35243ff77a3f44392136fb8a68bf754af1" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="5850f1a0253c2277adc87a6c083728246ab9698bcf060c3a40c7904b5f47e96a" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="c56ac4598f776b364245482d4cb8aac5f2470f00b84fdf20885227cadc6641e9" name="gvim" arch="i586">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="37ea6b7d089745c187ea440b690bc31d42a37d6ce0fb38eeb22097d6b5d553a1" name="gvim" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="f26bf4166b2b762e5ad37a2061f3909489076cbdbc0bace14653dfefd9339e7b" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="5b24456da3d6ac3aff737320902c26aaedca6252e2df24cfb331726892c007e2" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="5e5374da6e089a005b3764e8cdc2ee12ad8a631f03a70616992a2ce32a0cd6d0" name="hwinfo" arch="i586">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="79838ab917803e86c44494b3a3a6b0b86b73fb9142ef6710771434ed77395017" name="hwinfo" arch="src">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="d46920e274e3cf115322a8792645a01ad55fb330177f7cf36d5bf964fad0a00d" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="651dcb67587c9cbcead21f56b0d27663ca63062de6798fbff6cc932dc0290d64" name="hwinfo-devel" arch="i586">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="0a3d30c4c81dadc62bcf66e5095f6123ae07984db00748a3d16a4ae7491ccd69" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.66" rel="lp151.2.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
  <changelog author="schubi@suse.de" date="1552564800">- Update of pci and usb ids (bsc#1127840) (#77)
- 21.64</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
</package>
<package pkgid="b4a80beef145bb3f0e20c3f11a9ba6707d1a6d027c7e9d70241ccde8e6c1d6ff" name="ibacm" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="cb96bd25832e49673b9feb1c252b339471b8b4bbe119ef6ec5e200497b17fb03" name="ibacm" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="0f10f95be184cc4dc49027cc072bb6e5f873aed7acbf80917a9648dc63aec740" name="icewm" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="7ab7c0bd5da59b379c000c237e9dac233f7db6c58b22b997b6f6afdd1c120377" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="a725a8a62c8fbf9e02e9c2584c2fdc67eb6d1362fa216348c7faf2ebb8fe6dc9" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="8bfe96f214764ef9f247cfcc8c259665680cbf69f8d1e071d2e5c9b280e114bb" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="c2d342ab4816dd7571e833c781e5e39922eedfaeb1b8d9a05828752494717264" name="icewm-default" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="360bcc514fe4551b8b51d7020825e089f441c13d3d41b3d6685affd9f945a3ae" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="5b4889212254d065d58889ee520ecbb331c5a9055517ecbc32ddaea6d0abee4c" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="ab5c927eefdb9fd4d9a7fe86d06805a6ca5e4256cf5fe5161dc404accd6d079c" name="icewm-lite" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="0c1477107505073db5cdabb21c17d9496126b0139e4b02b2a933f153fefd18cb" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp151.8.3.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="8458901d12f83feb5e15858d79f7ca4bf0998cc9eb8445662c1b8b52bcfded92" name="irssi" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="841f5dd8d96f4d66679323fadea96f5ff827d3669940aee1d226fc2f9bae68a6" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="befeabbea03ecd70fafd146d28bc84be55ad807a284ae27cb0b1db554d5f6c8a" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="3c32d2bad75c274fd612042829016f85a290f281da742ff26de382f8eb24d8f0" name="iwpmd" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="b99ca4a5f3f0205996be590f64c6435ac797a7dff7f4ed4bbc1bdc335ec67d9a" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="ecb9df8e88315799df2ee09a8a9de699b4fb240bfe04a9288d9fe4860185fdd4" name="java-10-openjdk" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="729e13d67cfd6be657b0b74d01c60b8e2db3e3671c9b6587270813f145fb3a9a" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="4f00ab385039d8abf42a6499cbfa51b42561a3008851d7e4af80770412f4efdc" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="26b8ba208b7eb0995984e89157821c82a44b34752443619c363aeae63f7ff879" name="java-10-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="e37d24a7e1252222de9bda03a864ec68a69bf26d6031e39b616fb9e56fcf881e" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="b6b8f3d3c5d5551698576f0cd54da4d1b2daf75f13e3c33c9070fdf8d0fd4daa" name="java-10-openjdk-demo" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="51a4da5714e820b8eec23b162498d8eb2205f2b6599b345d9c524d08302f54d1" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="e0448b33cda38f5c1ddc42f28eef07f32e67e45e888f9e54acba9b3de973da34" name="java-10-openjdk-devel" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d15906816dd918c01ddeace351c342d363038dc5a60f3038bac36927dfd44216" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="37b5ce45c9cf2a8696d82910a3484ed28c6c850c12127fe31cebbd55a8ca9884" name="java-10-openjdk-headless" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="1c0a223b5087b8fff18bc74f45875210a516ac1d181cc52df0d6c6bddd3e4170" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="546857c7d8ec787cc3c61f8374ef69b16cc1fb465cb1a6373fee2ed8bc9d41f5" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="4c5d3339b15c03d28bf6a6b4c39b06ad2c1fc8bde950dada7a731556554ebd07" name="java-10-openjdk-jmods" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d6b7b861b064b062cf866ce60bf71a2c1e123e5959cf06c58aa7d858d10331e1" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="fe4a8f1d233e64a2998cc95b80c1e1fabd2dd4e237fc1736f325253e0f10bfad" name="java-10-openjdk-src" arch="i586">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="6cf5d96441d9076bfd94b5e3847edcf330f367ca2f9cb8c05f660980bbc3a111" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp151.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="abc1b71dd4baccc9190e545ba2bada8301c8a63b35dd48385c322cdff604090c" name="java-11-openjdk" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="4708868f9521302c7d4920102104a8bf156d4b87ca0d7054c725fe564a8c7726" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="5d02c7860c005fb0f9888d0b6f2e9de4ab5aa4cbe04e0b55c1444d27de49d4fc" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="c9629e23f47ad99777ec245847643d786044349c4a6ac70b0bf600ebef9596fc" name="java-11-openjdk-accessibility" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="2938503b77b2a886a7a55a3485f75aabf10c4e12e7d993ba5b4edba33b4d54ee" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="621d1a419ddfa771023367c95aae185e360423392e97df6c00003b568e2c5850" name="java-11-openjdk-demo" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0756289fa67214da46955c690c6d772b94024e3e65156c27cb18fb0311b7d022" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="79164acdf15464c0c8ef08f518ee00f5e6f517b6258aadfad6ca376edce4e0c8" name="java-11-openjdk-devel" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0828f96bc19a0e30d8fae471297736323ffa1d6f323d472298e457ef72b5e4d0" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="8de93471ba22722f14e418ec7f52d9c69b13426306ff3d35078635e089efb08f" name="java-11-openjdk-headless" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="f64253ff93414fe70cd1127f44100f4313428a100628dd69fb49750ebea24157" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="6988e3469126d9c9c75fa58646ab117c5ca8cd2fa6e907a976253f9452c32229" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="695cb51d2eb81684e90978eac403860505c95f9378a3b402dec391ccc0376e43" name="java-11-openjdk-jmods" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0bf0d9ad25eb72f714e0e45937aa272441dc7fcabf4058f4c8652ad957e9e590" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="0adf41d0eb4f8c212349c2fb13bf4277979f5de168f710000a19aadd5c126225" name="java-11-openjdk-src" arch="i586">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="6f449f682a2ee0c1e5cde65426442f55ba7be432d92294ec550f3407fb2aec02" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp151.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="828cc8dc019b030be1158009d6aaf60c6ee3ea0732bf122060b43c76fbf53f82" name="kdepim-runtime" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="74df6e10baead169143bf583346c17c2f32465d1d722af4ad24366f49c1f105a" name="kdepim-runtime" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="283efb4c6b2bcd5f8ee045df6bfa07a075effe8931710ac65beba3d290344f47" name="kdepim-runtime-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * make sure to create unique filename in maildir resource</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * IMAP resource: fix data loss on connection lost, depending on the current task
  * IMAP: Collection removal should be replayed on error.
  * IMAP Resource: handle disconnection before initial "OK" from server
  * Fix IMAP resource stuck if connection lost during Login.
  * Fix a bunch of typos in comments
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * resources/ews: Fix saving passwords to KWallet (kde#393002)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- Fix EWS connection when server needs an empty domain, fix kde#388496, backport:
  Add 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Don't try to EXPUNGE read-only mailboxes (kde#395417)
  * IMAP: pre-fill current password in the password dialog (kde#395964)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Always-add-domain-delimiter-if-Domain-checkbox-is-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1535803200">- Disable unnecessary WebKitWidgets dependency</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix crash when we didn't select a agent
  * USe nullptr
  * Fix gmail auth dialog popping up over and over again.
  * Remove these ones
  * Process IMAP Quota roots with associated quotas only
  * Fix array access bounds in IMAP resource (kde#396980)</changelog>
  <changelog author="lbeltrame@kde.org" date="1537444800">- Unversion the syndication requirement now that it has been moved
  to Frameworks</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Remove not necessary header when we send mail
  * Maildispatcher: escape '&lt;' and '&gt;' in error messages.
  * Fix compilation with Qt 5.12</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix Bug 399231 - Kmail uses a low resolution icon for the notification (kde#399231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix mem leak
  * Fix Bug 396820 - Buttons in new mail notifications don't work. (kde#396820)
  * Fix extract i18n</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Fix sort element
  * Make sure to delete it when action was done</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1561723200">- Add Qt5NetworkAuth and qca-qt5 BuildRequires for OAuth2 support
  for the EWS resource (boo#1139721)</changelog>
</package>
<package pkgid="651ad2db79c72e152afb3556a4fe53aaf52dd5687b6a7947c70553ab7b8c984a" name="keepassxc" arch="src">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="37519c41d707a1197f50fad216b884a2e73afe8bd75316f110c7ed97709f0d94" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="9dcd38924b8384da30b2173d7d5eb1bb182f8210b1e029e659d3dba06decc029" name="keepassxc" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="bae31c51f4528bc73f7f78eb27d1b9293e1b1e22c9a644c4a75591bc0da35772" name="keepassxc" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="01bc5a267076a3c0238b9e270a6de7994d24806b7d0263f9bb5a241afca1d79f" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
</package>
<package pkgid="cbae85c8e444cf7487973c0480a85c5c27cdcdcd346c7341d20ef17f0ab5dbbf" name="keepassxc-lang" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="lp151.2.6.1"/>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
  <changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
  <changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (boo#1072867)
- Fix filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519732800">- update to 2.3.0
  - Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179,
    [#1230], #1494]
  - Add SSH Agent feature [#1098, #1450, #1463]
  - Add preview panel with details of the selected entry [#879,
    [#1338]]
  - Add more and configurable columns to entry table and allow
    copying of values by double click [#1305]
  - Add KeePassXC-Browser API as a replacement for KeePassHTTP
    [#608]
  - Deprecate KeePassHTTP [#1392]
  - Add support for Steam one-time passwords [#1206]
  - Add support for multiple Auto-Type sequences for a single entry
    [#1390]
  - Adjust YubiKey HMAC-SHA1 challenge-response key generation for
    KDBX 4.0 [#1060]
  - Replace qHttp with cURL for website icon downloads [#1460]
  - Remove lock file [#1231]
  - Add option to create backup file before saving [#1385]
  - Ask to save a generated password before closing the entry
    password generator [#1499]
  - Resolve placeholders recursively [#1078]
  - Add Auto-Type button to the toolbar [#1056]
  - Improve window focus handling for Auto-Type dialogs [#1204,
    [#1490]]
  - Auto-Type dialog and password generator can now be exited with
    ESC [#1252, #1412]
  - Add optional dark tray icon [#1154]
  - Add new "Unsafe saving" option to work around saving problems
    with file sync services [#1385]
  - Add IBus support to AppImage and additional image formats to
    Windows builds [#1534, #1537]
  - Add diceware password generator to CLI [#1406]
  - Add --key-file option to CLI [#816, #824]
  - Add DBus interface for opening and closing KeePassXC databases
    [#283]
  - Add KDBX compression options to database settings [#1419]
  - Discourage use of old fixed-length key files in favor of
    arbitrary files [#1326, #1327]
  - Correct reference resolution in entry fields [#1486]
  - Fix window state and recent databases not being remembered on
    exit [#1453]
  - Correct history item generation when configuring TOTP for an
    entry [#1446]
  - Correct multiple TOTP bugs [#1414]
  - Automatic saving after every change is now a default [#279]
  - Allow creation of new entries during search [#1398]
  - Correct menu issues on macOS [#1335]
  - Allow compilation on OpenBSD [#1328]
  - Improve entry attachments view [#1139, #1298]
  - Fix auto lock for Gnome and Xfce [#910, #1249]
  - Don't remember key files in file dialogs when the setting is
    disabled [#1188]
  - Improve database merging and conflict resolution [#807, #1165]
  - Fix macOS pasteboard issues [#1202]
  - Improve startup times on some platforms [#1205]
  - Hide the notes field by default [#1124]
  - Toggle main window by clicking tray icon with the middle mouse
    button [#992]
  - Fix custom icons not copied over when databases are merged
    [#1008]
  - Allow use of DEL key to delete entries [#914]
  - Correct intermittent crash due to stale history items [#1527]
  - Sanitize newline characters in title, username and URL fields
    [#1502]
  - Reopen previously opened databases in correct order [#774]
  - Use system's zxcvbn library if available [#701]
  - Implement various i18n improvements [#690, #875, #1436]
- bump BR for libgcrypt-devel to &gt;= 1.7 as required by the update
- BR libargon2, libcurl and libsodium for the new features
- enable new browser integration mode, ssh-agent, dbus and
  networking support
- disable old style browser support
- cleanup filelist</changelog>
  <changelog author="mrueckert@suse.de" date="1519819200">- use -DWITH_XC_ALL=ON instead of enabling all features manually
  - this brings back the old HTTP based extension support for a
    graceful migration for users.</changelog>
  <changelog author="mrueckert@suse.de" date="1519819201">- Drop the post/postun scriptlets as they are a noop on TW/Leap
  15.0 and we can't build on older distros anymore.
  This fixes a warning about empty scriptlets.</changelog>
  <changelog author="mpluskal@suse.com" date="1519819202">- Mark license as such
- Convert more dependencies to pkgconfig() style</changelog>
  <changelog author="mrueckert@suse.de" date="1519819203">- if we kill the post/postun scriptlets we can also remove the
  related requires from the package</changelog>
  <changelog author="mrueckert@suse.de" date="1519819204">- also offer the uncompressed svg icons for desktop environments
  which dont support compressed icons. The program uses the .svgz
  internally so we keep them around.</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update to 2.3.1
  - Fix unnecessary automatic upgrade to KDBX 4.0 and prevent
    challenge-response key being stripped [#1568]
  - Abort saving and show an error message when challenge-response
    fails [#1659]
  - Support inner stream protection on all string attributes
    [#1646]
  - Fix favicon downloads not finishing on some websites [#1657]
  - Fix freeze due to invalid STDIN data [#1628]
  - Correct issue with encrypted RSA SSH keys [#1587]
  - Fix crash on macOS due to QTBUG-54832 [#1607]
  - Show error message if ssh-agent communication fails [#1614]
  - Fix ?pw-stdin and filename parameters being ignored [#1608]
  - Fix Auto-Type syntax check not allowing spaces and special
    characters [#1626]
  - Fix reference placeholders in combination with Auto-Type
    [#1649]
  - Fix qtbase translations not being loaded [#1611]
  - Fix startup crash on Windows due to missing SVG libraries
    [#1662]
  - Correct database tab order regression [#1610]
  - Fix GCC 8 compilation error [#1612]
  - Fix copying of advanced attributes on KDE [#1640]
  - Fix member initialization of CategoryListWidgetDelegate [#1613]
  - Fix inconsistent toolbar icon sizes and provide higher-quality
    icons [#1616]
  - Improve preview panel geometry [#1609]</changelog>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
</package>
<package pkgid="0f8c27b81837d845414644960526995253e4d623ac64053b2c43cfc6c234129f" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4f64ceae7ec64588791d73ada0a5039958c81a9f7c7cab833fc360da442ea53e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="a2f76e4b6d90e97e88e707b757e5007d80d7c84eccf92e0e6baa1eb44c87bf57" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8d970e4895f9b19d041d0e37b7522f0155c632823c3b026edc1e781fbad75688" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="a8a94849b75133eb34e6d93bd6bdde4e144b61c296c2db61cb9c86dfd90627cb" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="dee8f3dd89631b12b0b6bf0c5b8a58ac1f0bfa6c66aad88711cffe6e16709b22" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="858c827021d13da50ce869353d8dc15c88b39e1c34f5c6c3d7aeff8648813134" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="e9a5aab4723356aa1059057bfc74b3d561b15e0598c2a0bed65ede90360b43c1" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="748b0ae629004c5c51e72b7d44b2520f03faf466afc04ed1ac2b3551da83a6bb" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="c3183db5c85d2a15e6016788a1e2cf2b01bcba3e915a8f24a61bed1c81d1b22f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="41d194e491f6eb94845b499fd7b4baafead577719beaec9bd33c2b0d061df349" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="fd55e963c39561e5fc93a235ef56c382fa12077ba7a4301aae268165e4552454" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="2078663b8ee2ad3db9a93a6e842e80a415449497d647ff55a7741f284d0f7df1" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4027fd90fe57ccbdc6a589050750bd00bfddad514b3a64c503967f6e5e207fb8" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="5130492f5a04ec7291feab02edc62bdcc73023fb1a83714c7b074bfa5500d0e3" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="dd5b743107f11cc049be67e5aeae0e45381c268a1c6072eaa4be94ac6447c818" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="928f55bb64fb5f7a54a371a8af461e5150bb4c54dce6cf0e0117f9f1648efe70" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="38fa30a1fffd1e8f8f8282c1ad61474fd6a180b58d82451f7c94ac9a196a766a" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="14a43963555bb7bd58aa0fb3bfbab91e3f9697e54b9965214e87912c96f5f046" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="bda6caae2db2304105a0877f9e0ae2057c1886f39306a785f98f6c319ed0f3d1" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="bc6e4d0ba8ad93bfba24138759b91c07abcad27e2428b50c2cf2f82e95ec126b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="26cb6f2903607909638550e5a4ef3054e2fc341ced9f9423bde4fd02693eb85b" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="50d5e3406137e257bd432c7b5c3e68226dba46f62baa6aa1caa7e1d22731b33a" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5f76334ce5532e4a0692dc9bb47cde646194ded4aa43192a2fe6cf810e06b9fd" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="57c6de140d8069c00e0e2804ebc721d76333508816b43c62f6da405184f76258" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="fc84074631c0dc15113efaa89c77fcc42ed23728eacc82e848c3b599d68686a8" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="003c2548acd787566a5f0a236cc58f5a97d289b6d6b59503ad6a21f44cef7fab" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="a33d47f837a0024eb06fdc93358631cf905396c0485b9874a131defc1a7f7b09" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="2671b32c48b49b0b7608a55afc54c80d7572f75d7fc8298528663eb4b6795638" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="4c8f0b0f8dc72b3f523d052ee0febe775b1c7ace80afb11eec7d9f9adc57ccc3" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="19cad48629aac3588bb489d30e49a7229985f8af6555ef9ccf535389b60e982d" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="bae66515917cec0796d7f5085d133523eafc2c24ef77dac16547483ceea7169f" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="fbb8221483bd9b02385c7572d3ed855896b030a82aafdc4eb881d748d6385789" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="23dfb409db79b313a7bb68139daa7e0cc463472b6ec2e22a3adb71c88287a320" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="a1611b5b7eb3fcb3b59444618ae0b22df7710dd1f45b4b93a842fce180cfa6a9" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8113678d82f2082f3edf558d5d0824afac628e82f8e6dcfb1567da5079019795" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d02b48a82fc7f31c5f273885e882c00bc0327203e3d2147610f8893ae0ef2bfe" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20190312" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Update to version 20180606:
  * brcm: update firmware for bcm4356 pcie
  * brcm: update firmware for bcm4354 sdio
  * brcm: update firmware for bcm43362 sdio
  * brcm: update firmware for bcm43340 sdio
  * brcm: update firmware for bcm43430 sdio
  * Update Cypress license termination clause
  * amdgpu: update vega10 VCE firmware to version 55.3
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0)
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qcom: add venus firmware files for v5.2
  * linux-firmware: liquidio: update vswitch firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 20180717:
  * amdgpu: update copyright date
  * amdgpu: add initial VegaM firmware
  * amdgpu: sync up vega10 firmware with 18.20 release
  * amdgpu: sync up raven firmware with 18.20 release
  * amdgpu: sync up polaris12 firmware with 18.20 release
  * amdgpu: sync up polaris11 firmware with 18.20 release
  * amdgpu: sync up polaris10 firmware with 18.20 release
  * amdgpu: sync up verde firmware with 18.20 release
  * amdgpu: sync up pitcairn firmware with 18.20 release
  * amdgpu: sync up tahiti firmware with 18.20 release
  * amdgpu: sync up oland firmware with 18.20 release
  * amdgpu: sync up hainan firmware with 18.20 release
  * amdgpu: sync up kaveri firmware with 18.20 release
  * amdgpu: sync up mullins firmware with 18.20 release
  * amdgpu: sync up kabini firmware with 18.20 release
  * amdgpu: sync up hawaii firmware with 18.20 release
  * amdgpu: sync up bonaire firmware with 18.20 release
  * WHENCE: Fix typo Version
  * cxgb4: update firmware to revision 1.20.8.0</changelog>
  <changelog author="tiwai@suse.de" date="1532001600">- Remove useless check_whence.py that leads to unnecessary python
  dependency (bsc#1101818);
  also removing the python3 hack at prep, too</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
</package>
<package pkgid="97f2ee54e36b558580205d0a49104f073632bc927a61000193cad7fa492f4d53" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20190312" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Update to version 20180606:
  * brcm: update firmware for bcm4356 pcie
  * brcm: update firmware for bcm4354 sdio
  * brcm: update firmware for bcm43362 sdio
  * brcm: update firmware for bcm43340 sdio
  * brcm: update firmware for bcm43430 sdio
  * Update Cypress license termination clause
  * amdgpu: update vega10 VCE firmware to version 55.3
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0)
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qcom: add venus firmware files for v5.2
  * linux-firmware: liquidio: update vswitch firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 20180717:
  * amdgpu: update copyright date
  * amdgpu: add initial VegaM firmware
  * amdgpu: sync up vega10 firmware with 18.20 release
  * amdgpu: sync up raven firmware with 18.20 release
  * amdgpu: sync up polaris12 firmware with 18.20 release
  * amdgpu: sync up polaris11 firmware with 18.20 release
  * amdgpu: sync up polaris10 firmware with 18.20 release
  * amdgpu: sync up verde firmware with 18.20 release
  * amdgpu: sync up pitcairn firmware with 18.20 release
  * amdgpu: sync up tahiti firmware with 18.20 release
  * amdgpu: sync up oland firmware with 18.20 release
  * amdgpu: sync up hainan firmware with 18.20 release
  * amdgpu: sync up kaveri firmware with 18.20 release
  * amdgpu: sync up mullins firmware with 18.20 release
  * amdgpu: sync up kabini firmware with 18.20 release
  * amdgpu: sync up hawaii firmware with 18.20 release
  * amdgpu: sync up bonaire firmware with 18.20 release
  * WHENCE: Fix typo Version
  * cxgb4: update firmware to revision 1.20.8.0</changelog>
  <changelog author="tiwai@suse.de" date="1532001600">- Remove useless check_whence.py that leads to unnecessary python
  dependency (bsc#1101818);
  also removing the python3 hack at prep, too</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
</package>
<package pkgid="f9b79f7bd4ad19b8bfabe7eddb566e339ca33318300afd7ab6686f791aeefb94" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20190618" rel="lp151.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289,
  bsc#1128292):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303,bsc#1136498)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555329600">- Update to version 20190409:
  * linux-firmware: Add firmware file for Intel Bluetooth 22161
  * cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
  * linux-firmware: Update NXP Management Complex firmware to version 10.14.3
  * linux-firmware: add firmware for MT7615E
  * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
  * linux-firmware: update Marvell 8797/8997 firmware images
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
  * cxgb4: update firmware to revision 1.23.3.0
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1556884800">- Update to version 20190502:
  * amdgpu: update vega20 to the latest 19.10 firmware
  * amdgpu: update vega12 to the latest 19.10 firmware
  * amdgpu: update vega10 to the latest 19.10 firmware
  * amdgpu: update polaris11 to the latest 19.10 firmware
  * amdgpu: update polaris10 to the latest 19.10 firmware
  * amdgpu: update raven2 to the latest 19.10 firmware
  * amdgpu: update raven to the latest 19.10 firmware
  * amdgpu: update picasso to the latest 19.10 firmware
  * linux-firmware: update fw for qat devices
  * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
  * drm/i915/firmware: Add ICL HuC v8.4.3238
  * drm/i915/firmware: Add ICL GuC v32.0.3
  * drm/i915/firmware: Add GLK HuC v03.01.2893
  * drm/i915/firmware: Add GLK GuC v32.0.3
  * drm/i915/firmware: Add KBL GuC v32.0.3
  * drm/i915/firmware: Add SKL GuC v32.0.3
  * drm/i915/firmware: Add BXT GuC v32.0.3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1558699200">- Update to version 20190514:
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * amlogic: add video decoder firmwares
  * iwlwifi: update -46 firmwares for 22260 and 9000 series
  * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
  * iwlwifi: add -46.ucode firmwares for 9000 series</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560168000">- Update to version 20190607:
  * linux-firmware: update firmware for mhdp8546
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * imx: sdma: update firmware to v3.5/v4.5
  * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560945600">- Update to version 20190618:
  * cavium: Add firmware for CNN55XX crypto driver.
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
  * linux-firmware: update licence text for Marvell firmware</changelog>
</package>
<package pkgid="babfc1d3221fb59c6c0b4a1da50e663d57ddbc5146b8495175adc18a4022cb58" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20190618" rel="lp151.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289,
  bsc#1128292):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303,bsc#1136498)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555329600">- Update to version 20190409:
  * linux-firmware: Add firmware file for Intel Bluetooth 22161
  * cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
  * linux-firmware: Update NXP Management Complex firmware to version 10.14.3
  * linux-firmware: add firmware for MT7615E
  * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
  * linux-firmware: update Marvell 8797/8997 firmware images
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
  * cxgb4: update firmware to revision 1.23.3.0
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1556884800">- Update to version 20190502:
  * amdgpu: update vega20 to the latest 19.10 firmware
  * amdgpu: update vega12 to the latest 19.10 firmware
  * amdgpu: update vega10 to the latest 19.10 firmware
  * amdgpu: update polaris11 to the latest 19.10 firmware
  * amdgpu: update polaris10 to the latest 19.10 firmware
  * amdgpu: update raven2 to the latest 19.10 firmware
  * amdgpu: update raven to the latest 19.10 firmware
  * amdgpu: update picasso to the latest 19.10 firmware
  * linux-firmware: update fw for qat devices
  * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
  * drm/i915/firmware: Add ICL HuC v8.4.3238
  * drm/i915/firmware: Add ICL GuC v32.0.3
  * drm/i915/firmware: Add GLK HuC v03.01.2893
  * drm/i915/firmware: Add GLK GuC v32.0.3
  * drm/i915/firmware: Add KBL GuC v32.0.3
  * drm/i915/firmware: Add SKL GuC v32.0.3
  * drm/i915/firmware: Add BXT GuC v32.0.3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1558699200">- Update to version 20190514:
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * amlogic: add video decoder firmwares
  * iwlwifi: update -46 firmwares for 22260 and 9000 series
  * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
  * iwlwifi: add -46.ucode firmwares for 9000 series</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560168000">- Update to version 20190607:
  * linux-firmware: update firmware for mhdp8546
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * imx: sdma: update firmware to v3.5/v4.5
  * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560945600">- Update to version 20190618:
  * cavium: Add firmware for CNN55XX crypto driver.
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
  * linux-firmware: update licence text for Marvell firmware</changelog>
</package>
<package pkgid="142d3d91807fbd06669ed823f772f3f8527e3343e421c216fed974e104d063cd" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="7ef01c2591f3a3bfc9a9671abd8bfea013109098cc74a4aecf011d5f7bf253f5" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="a6980224268acd8da7bf9a4aeb70a7014de4539d0e311de6b39cd279c19c3afe" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="0319e3f9bedfbb996b1a46470bd2931652b2abf0348ea686640e84bdfd0e7206" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="79632d11ca3f788a3bb53531c6710d4b29cdc9fce11d48b228de120b98f442a4" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="87682a89e0c7ee524809e8c470a3a9d6ccb01fda7fa77f5e5eaf3a0799803d20" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="f60c36332d29aab15b2f6e18029e43860ba37f95f25bdd76d3fae85c8496a167" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="402636807d194e1df2768c71ffaf09186244530614954e283867fa5a053011c8" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8bcbf1e41a244d803f36f4e97fe1af79e17904872d9c70d7c4dca1875823c4dd" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d20d0bbce6a1421da81e6c26b454726ad77e5c6dbebd49b27fc157daaf8f443b" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="a63bb0331fd284cba57c64654274914e81ff31ed86d7c28bf489282ff2d7748a" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="6b5bd7a233b94833647a6b78097731cb9205c63d9ed75cd49405ac457116f482" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="a45506ad2e2fa853c9d7873e7160dcd8e58715245d473769af90a5cf068ca6e2" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="67861bcb61d7523e9ae0caf67764fcdccb669bea91527de1d0bbf0140e74aadd" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5345984a3a1a80da14a546669e3f14eedc9dea9fee07a910f67de7b92e086d11" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="fbd3254927b37dc88990a1cab69214ba817c78f7df2a783ddf7437b083dc6c26" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="96adebe93915bd15dfb2fb5ab847e10e154d8c99a6329ff572f943b3727d9ded" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="84d64e051041d4571ee623b6b735d429fe8affb42a09dfd655406352f1a747f5" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="0ed338a09128ff6bdb531d90b09ceb2b69b154d46290b0f22ab7671b24bfcb83" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="ec735f3904c0afa9c4e2fbda2017947c538df8607a00d164294f913eab1b5c5b" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="f24a6cd09a7e677637b1872ab178f4db6279728faed636b70a3ea6ace4792bab" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="465f7d4d31aefeab342a319fcff1414dd906e9aa1eae0f9fca84b2662ecbb318" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="898c3306477c95d19a06d1626d569c7cab02ad93b11baf81c42f212c74eabf30" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="3511ab8e29bd19a4a4f40449503a4eadf1686176ae6094d5e2496716afbc622c" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="c8dff944e1ef57415a991904444a8d4d62a75f224d514dad348c74798f16d732" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="28d0e500c94caf4e7a2ccaaabbfd741412535fab32712f42379e3748df7ae855" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="bdd38e4cd0845ef58a422aa9a2827729e4ccdb500a249612c8c0df144155bd45" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d98409ced0e36b8e585fdb43b0f74f2aa89861898afa6f0a2ddf0fd6dee04328" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="676170a3a1357d2fcec55b00143f1bbc76af76bd6d262d8fa5235f07bac8d39c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="6052aab385878f6408b4cf518dbccfc2f83e02b58aa74673f67238228cf7892a" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="24fd9e44ec8cde7191c86a5b76e0088c60dc8cd91a1126416f3bf0e5a6a2e0e9" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="5bc2fef664838358f9e755094c27f5d606991d41321cc1979ddcdcd433e853b7" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="8d1023bf6634f9e1856c197101c8a706d65b4044c3561811336e245ee1f4d9db" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d9f16d6866e323462d831d12b0af3ecf1bdcab41d659090fb548ad9709386dc8" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="02a7c7d9273bb6f15728979cc6aca01230a744e606b126ada916383645276aeb" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="8b44107f68676614c350cbfaef10d3912198d149671a0ebdf666d5c785cda4f4" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="69ea4c7d7c962f9f39a764b9bab86f965221b2ed861a2e8f506cc7a1a3e52392" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="24d303532f417ffb71a98b951a4951d0c7e3cc77b25290ba0859ca27003e2d02" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="702cc24ee0ff303d0ebf9e203bab01b9d641d26b44ad04a4403c4ebb49a93bdc" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="106ea007643fd4a3cb077accb3b4177ed553546ea2c233b1ef10f6e4cb566b61" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="c804ef2c38cf25292406f34540e6bbef401abb2100045946bab519290ba27bbf" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="2452800f6d01a74d0cc9efdb788268b6eca6ed021325244b58bd20b03834a21d" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="860d98e05df0c5c7f134c34f40a24302773ff9fdea02a84e0c3651ec67a01a0f" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="485644b95aeb65c3d28358e70cc25a73d422a308d4835c7ac45ec86dafd1e8ed" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="9edaed47122abd9fdbd9ff6f221a15bcecf8faca3ac100edc283ae901c508e65" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="24a80d78e5802d1cfa970f55afbc062575938a7d5968f105079df86661c4fdef" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="2b56f7d76dadc7a0aec82eb125498d817ed0aade4ec2ec8a0a756b19e751c91e" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="d901413f0b6239613972eee14549b4ce1ee725ef9cd77a37bcbee63dcde12069" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="7f50d0532a8aa08b3de7b634278ddd6214a2d1428f1b6b100118ac568f747c25" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="f7bda8d9d002f39e97b94c7d427541f6a3e5e00dff5c2860172424074a0a55f2" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="22f5f36ddfd8e6c97df7b2a0c6ea42426bfb3b2311095611ef42297c6530103b" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="143af2941cd58b5fc2fa799bad8c46af373f14d331c4a13c091e471e690a5201" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.10.1"/>
  <changelog author="tiwai@suse.de" date="1562760000">- ACPICA: Clear status of GPEs on first direct enable
  (bsc#1111666).
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
  (bsc#1111666).
- commit 46263ea</changelog>
  <changelog author="mgorman@suse.de" date="1562760001">- mm/vmscan.c: prevent useless kswapd loops (git fixes
  (mm/vmscan)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git
  fixes (mm/hugetlbfs)).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes
  (mm/hugetlbfs)).
- commit fcdbd4c</changelog>
  <changelog author="tiwai@suse.de" date="1562760002">- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- commit 7e1f173</changelog>
  <changelog author="tiwai@suse.de" date="1562760003">- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- commit 363979e</changelog>
  <changelog author="tiwai@suse.de" date="1562760004">- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- commit fd92574</changelog>
  <changelog author="tiwai@suse.de" date="1562760005">- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
  (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
  (bsc#1051510).
- commit a2d5600</changelog>
  <changelog author="tiwai@suse.de" date="1562760006">- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
  (bsc#1051510).
- commit 9791296</changelog>
  <changelog author="tiwai@suse.de" date="1562760007">- irqchip/mbigen: Don't clear eventid when freeing an MSI
  (bsc#1051510).
- commit 6a90fd2</changelog>
  <changelog author="tiwai@suse.de" date="1562760008">- irqchip/gic-v3-its: fix some definitions of inner cacheability
  attributes (bsc#1051510).
- commit bd40199</changelog>
  <changelog author="tiwai@suse.de" date="1562760009">- mfd: hi655x: Fix regmap area declared size for hi655x
  (bsc#1051510).
- commit 624e738</changelog>
  <changelog author="tiwai@suse.de" date="1562760010">- PCI: Do not poll for PME if the device is in D3cold
  (bsc#1051510).
- commit d4fcd5f</changelog>
  <changelog author="tiwai@suse.de" date="1562760011">- PM: ACPI/PCI: Resume all devices during hibernation
  (bsc#1111666).
- commit c894803</changelog>
  <changelog author="tiwai@suse.de" date="1562760012">- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- commit a9e87e7</changelog>
  <changelog author="tiwai@suse.de" date="1562760013">- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
  (bsc#1051510).
- commit 72883d3</changelog>
  <changelog author="tiwai@suse.de" date="1562760014">- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  (bsc#1051510).
- drm/i915/dmc: protect against reading random memory
  (bsc#1051510).
- commit 6b491bf</changelog>
  <changelog author="tiwai@suse.de" date="1562760015">- blacklist.conf: Add already cherry-picked commits for drm/i915
- commit f5294bb</changelog>
  <changelog author="tiwai@suse.de" date="1562760016">- drm/amd/powerplay: use hardware fan control if no powerplay
  fan table (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
  (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
  (bsc#1111666).
- drm/fb-helper: generic: Don't take module ref for fbcon
  (bsc#1111666).
- commit e37ac1a</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846400">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit 3f92a3e</changelog>
  <changelog author="ptesarik@suse.cz" date="1562846401">- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- commit bf2abc2</changelog>
  <changelog author="lduncan@suse.com" date="1562932800">- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV
  data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693
  bsc#1136462).
- scsi: qedi: Fix spelling mistake "OUSTANDING" -&gt; "OUTSTANDING"
  (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition
  (jsc#SLE-4693 bsc#1136462).
- commit ca04cd0</changelog>
</package>
<package pkgid="52658e3450bee4310629f27d851b36ea4c44e9d74b673e5f78b3b3228e9fd85b" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.4.1"/>
  <changelog author="tiwai@suse.de" date="1558612800">- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- commit f3bfe00</changelog>
  <changelog author="tiwai@suse.de" date="1558612801">- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- commit 472b149</changelog>
  <changelog author="tiwai@suse.de" date="1558612802">- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- commit dfaa13c</changelog>
  <changelog author="tiwai@suse.de" date="1558612803">- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route
  (bsc#1051510).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- commit 034e32f</changelog>
  <changelog author="tiwai@suse.de" date="1558612804">- blacklist.conf: Add reverted entries for ipvlan
- commit e8535d6</changelog>
  <changelog author="tiwai@suse.de" date="1558612805">- ipvs: Fix signed integer overflow when setsockopt timeout
  (bsc#1051510).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
  (bsc#1051510).
- commit c0d0472</changelog>
  <changelog author="tiwai@suse.de" date="1558612806">- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- commit 917dc56</changelog>
  <changelog author="tiwai@suse.de" date="1558612807">- l2tp: revert "l2tp: fix missing print session offset info"
  (bsc#1051510).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- commit 9da90d9</changelog>
  <changelog author="tiwai@suse.de" date="1558612808">- mac8390: Fix mmio access size probe (bsc#1051510).
- commit ae05479</changelog>
  <changelog author="tiwai@suse.de" date="1558612809">- MD: fix invalid stored role for a disk (bsc#1051510).
- commit 44ef4a6</changelog>
  <changelog author="oneukum@suse.com" date="1558612810">- PCI: pciehp: Tolerate Presence Detect hardwired to zero
  (bsc#1133016).
- Refresh
  patches.drivers/0001-PCI-pciehp-Unify-controller-and-slot-structs.patch.
- commit cbef614</changelog>
  <changelog author="vbabka@suse.cz" date="1558612811">- mm/mincore.c: make mincore() more conservative (CVE-2019-5489,
  bsc#1120843).
- commit 1e17fa5</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612812">- Refresh
  patches.drm/drm-i915-Disable-LP3-watermarks-on-all-SNB-machines.patch.
- commit d7b63e6</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612813">- kmsg: Update message catalog to latest IBM level (2019/03/08)
  (bsc#1128904 LTC#176078).
- commit d18ce40</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612814">- s390/qdio: clear intparm during shutdown (bsc#1134597
  LTC#177516).
- commit fbf32ad</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612815">- Update patches.arch/s390-qdio-clear-intparm-during-shutdown
  (bsc#1134597 bsc#1134600 LTC#177516 LTC#177517).
- commit 00d8d86</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612816">- net/smc: check for ip prefix and subnet (bsc#1134607
  LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607
  LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607
  LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607
  LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607
  LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607
  LTC#177518).
- net/smc: wait for pending work before clcsock release_sock
  (bsc#1134607 LTC#177518).
- commit 77acc58</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612817">- net/smc: consolidate function parameters (bsc#1134607
  LTC#177518).
- Refresh
  patches.kabi/net-smc-preallocated-memory-for-rdma-work-requests
- commit 278f2e9</changelog>
  <changelog author="ptesarik@suse.cz" date="1558612818">- net/smc: improve smc_conn_create reason codes (bsc#1134607
  LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607
  LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- commit e4f2e1f</changelog>
  <changelog author="ptesarik@suse.cz" date="1558699200">- Update patches.fixes/net-smc-check-for-ip-prefix-and-subnet
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-cleanup-of-get-vlan-id (bsc#1134618
  LTC#177520).
- Update patches.fixes/net-smc-code-cleanup-smc_listen_work
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-consolidate-function-parameters
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-fallback-to-tcp-after-connect-problems
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-a-null-pointer-dereference
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-fix-return-code-from-flush-command
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_conn_create-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-improve-smc_listen_work-reason-codes
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-move-unhash-before-release-of-clcsock
  (bsc#1134618 LTC#177520).
- Update patches.fixes/net-smc-nonblocking-connect-rework
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-propagate-file-from-smc-to-tcp-socket
  (bsc#1134618 LTC#177520).
- Update
  patches.fixes/net-smc-wait-for-pending-work-before-clcsock-release_sock
  (bsc#1134618 LTC#177520).
- commit b2dfaba</changelog>
</package>
<package pkgid="229d6b1e5559047b8deee6705d66c9e990f39684e7677005c745cac308319718" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.28.7.1"/>
  <changelog author="tiwai@suse.de" date="1560772800">- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to
  remove flow (bsc#1111666).
- commit aaa2fa7</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772801">- kabi/severities: Whitelist more s390x internal symbols
- commit 896cfde</changelog>
  <changelog author="tiwai@suse.de" date="1560772802">- drbd: Avoid Clang warning about pointless switch statment
  (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote
  (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected
  peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- commit 1b56dd8</changelog>
  <changelog author="tiwai@suse.de" date="1560772803">- mfd: tps65912-spi: Add missing of table registration
  (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init
  (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register
  (bsc#1051510).
- commit 45c05ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772804">- mmc: mmci: Prevent polling for busy detection in IRQ context
  (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO
  controllers (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
  (bsc#1051510).
- commit 4cc9ed1</changelog>
  <changelog author="tiwai@suse.de" date="1560772805">- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D
  (bsc#1051510).
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read
  (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support
  (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated
  function (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing
  (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors
  (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes
  (bsc#1051510).
- commit 995ba83</changelog>
  <changelog author="tiwai@suse.de" date="1560772806">- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg
  device registration (bsc#1051510).
- platform/chrome: cros_ec_proto: check for NULL transfer function
  (bsc#1051510).
- commit 25f102b</changelog>
  <changelog author="tiwai@suse.de" date="1560772807">- power: supply: max14656: fix potential use-before-alloc
  (bsc#1051510).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks
  (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with
  CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- commit 5350e46</changelog>
  <changelog author="tiwai@suse.de" date="1560772808">- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- commit 0e367f8</changelog>
  <changelog author="tiwai@suse.de" date="1560772809">- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- commit b9c3164</changelog>
  <changelog author="tiwai@suse.de" date="1560772810">- blacklist.conf: Add reverted commits
- commit 53e0469</changelog>
  <changelog author="tiwai@suse.de" date="1560772811">- spi: spi-fsl-spi: call spi_finalize_current_message() at the
  end (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in
  spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
  (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- commit 67743a6</changelog>
  <changelog author="tiwai@suse.de" date="1560772812">- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- commit c4f5a31</changelog>
  <changelog author="tiwai@suse.de" date="1560772813">- video: imsttfb: fix potential NULL pointer dereferences
  (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference
  (bsc#1051510).
- virtio_console: initialize vtermno value for ports
  (bsc#1051510).
- commit 080b4ed</changelog>
  <changelog author="tiwai@suse.de" date="1560772814">- watchdog: imx2_wdt: Fix set_timeout for big timeout values
  (bsc#1051510).
- commit 36d29bd</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772815">- kabi/severities: Whitelist airq_iv_* (s390-specific)
- commit 7603816</changelog>
  <changelog author="bp@suse.de" date="1560772816">- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- commit b8ed726</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772817">- s390/protvirt: block kernel command line alteration
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: add memory sharing for diag 308 set/store
  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- commit 0bd8e94</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772818">- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759
  FATE#327003 bsc#1135153 LTC#173151).
- Update config files.
- Refresh patches.arch/s390-enable-processes-for-mio-instructions.
- commit 8d66a40</changelog>
  <changelog author="ptesarik@suse.cz" date="1560772819">- Update config files.
- commit 1705ab7</changelog>
</package>
<package pkgid="82e40030a8cd1a2791def8858456444db45c3000e3b9710575e2da8303ca2645" name="kidentitymanagement" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="4b5ba67b3bd9be6b4e180e7f43084bbf2f362e69af7708205fce0949d47521df" name="kidentitymanagement-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="fe445a617b90c36b0ab91d07a131692e24c77fe82e112153c0198772031b0d5e" name="kidentitymanagement-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="de2a9ff97aa89065ebc4c201d0005d839044ad6bff1e3fc0c6cedc349fd5c1b2" name="kio-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="f6fb7416f0cd4e0e272be17de0f884a4991eccc0602d43ecedee0c873ecf1999" name="kio" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="0e9d89f4ce445171aa5ba7d1136dc410b42d09257abf259c9625aedc1633f3b8" name="kio" arch="src">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="36d67bc5f0ebf1b0ef07b33a0589bf563126e2ca25f288c82bfeb447ecb7f133" name="kio" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="1dda5b6c6aa7fb4ba8c03c0e6d7f7ebe727b4d4ad3541cbe67ac3900b303919d" name="kio-core-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="f4b2decc46b6c08e86515a4f9879fc9d84d7ccde04492f5d0a11999da0240137" name="kio-core" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="fd2b9775bcaf1fa6baae9a9682786a277df97a3ea7e94e14accc727f24b5fc87" name="kio-core" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="cc09d022c95396dea1fda5c5c7b56931230f6b07940aad725816ebc76b91f3a0" name="kio-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="30dda8664f75cba5806cb699e9e6b4aa7f89f95c6f9a57490023ea1fbe9b1196" name="kio-devel" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="075b882370ef582f5717d4abe385c25aa9e55d6070e9c3efcc7d937fa169f61a" name="kio-devel" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="36a5a238e73649e262bfbafc0f70df48409d649410e301c2f37bac744fc60c43" name="kio-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525435200">- Add 0001-Revert-Support-NTFS-hidden-files.patch to revert the new
  support for NTFS hidden files, it caused the mount point itself
  to be hidden (boo#1091780, kde#392913)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1527854400">- Don't recommend kio-extras5</changelog>
  <changelog author="lbeltrame@kde.org" date="1528891200">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Check if destination exists also when pasting binary data (kde#394318)
  * Auth support: Return the actual length of socket buffer
  * Auth support: Unify API for file descriptor sharing
  * Auth support: Create socket file in user's runtime directory
  * Auth support: Delete socket file after use
  * Auth support: Move task of cleaning up socket file to FdReceiver
  * Auth support: In linux don't use abstract socket to share file
    descriptor
  * [kcoredirlister] Remove as many url.toString() as possible
  * KFileItemActions: fallback to default mimetype when selecting only files
    (kde#393710)
  * Introduce KFileItemListProperties::isFile()
  * KPropertiesDialogPlugin can now specify multiple supported protocols
    using X-KDE-Protocols
  * Preserve fragment when redirecting from http to https
  * [KUrlNavigator] Emit tabRequested when path in path selector menu is
    middle-clicked
  * Performance: use the new uds implementation
  * Don't redirect smb:/ to smb:// and then to smb:///
  * Allow accepting by double-click in save dialog (kde#267749)
  * Enable preview by default in the filepicker dialog
  * Hide file preview when icon is too small
  * i18n: use plural form again for plugin message
  * Use a regular dialog rather than a list dialog when trashing or deleting
    a single file
  * Make the warning text for deletion operations emphasize its permanency
    and irreversibility
  * Revert "Show view mode buttons in the open/save dialog's toolbar"</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Support-NTFS-hidden-files.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
- Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Too many changes to list here
- Drop 0001-Revert-Support-NTFS-hidden-files.patch, the problem
  with the root folder being hidden has been fixed (or rather
  workarounded) upstream</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539864000">- Add patch to fix kio_help crashing on start:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-kio_help-Fix-crash-in-QCoreApplication-when-accessin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * Too many changes to list here
- Add upstream patch to prevent crashes in KIO (kde#402665)
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Improve keyboard controls of the checksum widget
  * Add helper function to disable redirections (useful for kde-open)
  * Correct tag
  * Revert "Refactor SlaveInterface::calcSpeed" (kde#402665)
  * Revert "Fix elapsed time check"
  * NetRC: Delete copy constructor and assignment operator
  * KPasswdServerClient: Delete copy constructor and assignment operator
  * KSSLSettings: Delete copy constructor and assignment operator
  * delete copy constructor and assignment operator of some internal classes
  * Fix elapsed time check
  * Don't set CMake policy CMP0028 to old. We don't have targets with :: unless they are imported...
  * [kio] Add ellipsis to search label in Cookies section
  * [KNewFileMenu] Don't emit fileCreated when creating a directory
  * Use (and suggest using) the nicer K_PLUGIN_CLASS_WITH_JSON
  * avoid blocking kio_http_cache_cleaner and ensure exit with session (kde#367575)
  * Fix failing knewfilemenu test and underlying reason for its failure
- Dropped patches, now upstream:
  * 0002-Revert-Refactor-SlaveInterface-calcSpeed.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1551614400">- Add Fix-NTFS-hidden-check-for-symlinks.patch to avoid hiding
  symlinks to NTFS mountpoints (kde#402738)</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561377600">- Add kio-lang.tar.xz with updated Lithuanian translations, the
  included ones KDE Frameworks 5.55 were rather incomplete
  (boo#1139359).</changelog>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1561550401">- Update kio-lang.tar.xz by including updated translations for
  da eu gl id ja ko lt nn pa pl pt_BR ru sk languages based on
  KDE Frameworks 5.59 translations by executing
  msgmerge -N --previous $NEW.po $OLD.po</changelog>
</package>
<package pkgid="654d871dec71c43e43a5a860419b897dcfd7546b9debecfc22b00b521ad71f88" name="kmail" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="3dc660e9c575667d80a20d6c2dacb90f9257e1ab86f27e461715bde1855a848b" name="kmail" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="2a6e52415127e4411e1110ac4fd8cdca5262a4717a89b27bd1ed8a092734b5fc" name="kmail" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="50fa194d35fd180e755a4f495a8c3119fc83dbb229523c1565a5c5ed331c22e1" name="kmail" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="94a4eda63181925447b9851d1491a8e0f587a4c2e82857eec0dbfea623f2a832" name="kmail-application-icons" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="fa846a2f1848f2e2313afb1a6ca1d7126cb112321e9251c536519dbec0d26793" name="kmail-application-icons" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="3f18d4e6cd51a682f70af683301c4f7b8344422703aedbf81fc076df6bdb1440" name="kmail-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="1c843a3ea4b1916523f07ab1733ddae10e6ab566b536a0047a99cc21ce6e61ee" name="kmail-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="98f57c022b363c17f2b61af74800d00cdc11e18de0f0cca89c1dc7a9529b9f66" name="kmozillahelper" arch="src">
  <version epoch="0" ver="5.0.5" rel="lp151.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
</package>
<package pkgid="6d479190b6c0182ebec2f3dd5eae42388bd7a249a143432e8b240c44c14163e2" name="kmozillahelper" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1484568000">- Add initial package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913600">- Update to 4.9.10 to fix build with Leap 42.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484913601">- Update to 4.9.11 to fix default file dialog location and filename</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485259200">- Update to 4.9.12 to implement setting dialogs modal for firefox</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485604800">- Update to 4.9.13 to disallow simultaneous commands from multiple
  firefox windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485777600">- Update to 4.9.14 to fix 100% CPU consumption after quitting firefox
  and also handle fake mimetypes for protocols (x-scheme-handler/...)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1485864000">- Update to 4.9.15 to fix the default directory selected in
  file dialogs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486555200">- Bump version to 5.0.0, ready for factory submission</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1486814400">- Update to 5.0.1:
  * Fix crash with missing filetype description gh#kmozillahelper/9
  * Fix excessive CPU use in some cases</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516363200">- Update to 5.0.2:
  * Workaround for file dialogs failing to deliver the result
    under some circumstances</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1544270400">- Update to 5.0.3:
  * Improve HiDPI support
- Add %license</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1563451200">- Update to 5.0.4:
  * Cache helper protocols (boo#1037806)
  * Use new style connect
  * Don't use deprecated KRun:runUrl without flags, use with flags</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564660800">- Update to 5.0.5:
  * Recognize if started from Thunderbird</changelog>
</package>
<package pkgid="95d29326a29966962e2aa75cfc73d0e4d570eb7813f408ad569fe20382af687d" name="kmymoney" arch="src">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="c6242e0207e603e3f182908f94da586dc2676e778a866bad31869ba00adcbe99" name="kmymoney" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="3ff0f764fe020ffc278b519ce9c363968e62ce7ac10e374abf364885a0fe0f07" name="kmymoney-devel" arch="x86_64">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="150173a9f44ae35578a62dee98c72f80a53a9472144937b6af300a38dbe0e773" name="kmymoney-lang" arch="noarch">
  <version epoch="0" ver="5.0.5" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1527422400">- Add Fix-build-with-Qt-5.11.patch to fix build with Qt 5.11
- Update build requirements versions, it needs Qt 5.6.0 meanwhile
- Remove libkmm_csvimportercore.so and libkmm_icons.so from main
  package's filelist, they are supposed to be in the devel
  subpackage only</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1541419200">- Update to version 5.0.2
  * List of bugs which have been fixed:
    + when using the 'amount entry widget' in the ledger view, it
    hangs off the screen (kde#283784)
    + Update the documentation screenshots (kde#340244)
    + Saving anonymous file loses relation between investment
    accounts and brokerage accounts (kde#340902)
    + investment account does not have key value pair for
    lastImportedTransactionDate (kde#343878)
    + User is asked to create a new category in splits table if
    change is aborted (kde#344409)
    + "Update Stock and Currency Prices" doesn't work when base
    currency is South Korean Won(KRW) (kde#368190)
    + investactivities.cpp: 8 * Redundant condition (kde#385180)
    + Entering fees in Investment account (ie broker fee) doesn't
    appear with transaction (kde#390750)
    + Double free or corruption when creating a new asset account
    (kde#391251)
    + Missing 2 .h files in /usr/include/kmymoney (kde#392110)
    + 5.0.1 is shown as 5.0.0 in splash screen and about dialog
    (kde#392372)
    + Home page Net Worth Forecast Not correct (kde#392407)
    + Cannot create new investment (kde#392477)
    + Reports Configure dialog uses a "Find" button instead of an
    "Apply" button (kde#392519)
    + OFX - Mapping Account - Last Update Change causing Update
    Account greying - Online Settings disappears (kde#392603)
    + Crash on viewing or trying to add data into any account
    (kde#392735)
    + [Patch] Fix working week in 5.x/master (kde#393168)
    + Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
    + MySQL connection error with dbname "KMyMoney" (kde#394384)
    + problems adding securities to investment accounts (kde#394394)
    + csv writer generates invalid file in case field delimiter is
    used in any field (kde#395025)
    + CSV Export of Investment Accounts does not issue transactions
    on non-English kmymoney installations (kde#395040)
    + Last selected view (kde#395100)
    + KMyMoney gitt head master, crash on opening any account
    (kde#395291)
    + Ledger Input: Category Field (kde#395459)
    + QIF Export manually typing file path adds .qif after every
    character (kde#395985)
    + Cannot create new investment (kde#396174)
    + Last digit of date field is obscured by "details column" in
    ledger view (kde#396405)
    + CSV: ordering of buttons when finishing wizard (kde#396759)
    + Online Banking Behavior Change Since 4.8 (kde#396886)
    + Payee "Suggest a category" does not work (kde#396987)
    + Opening dates in "all dates" plot (kde#397020)
    + Net worth does not appear (kde#397021)
    + Default color of imported transaction in the ledger (kde#397023)
    + Kmymoney version in help menu, splash screen and apt are
    different (kde#397025)
    + Net worth forecast graph in new file shows formatting problem
    (kde#397436)
    + double clicking in ledger activates edit, but does not select
    transaction clicked on (kde#397457)
    + cannot connect to kmysql database because of prepended slash
    (kde#397675)
    + Limit in number of securities (397824)
    + écran d'accueil (kde#398168)
    + Account information report crashes (kde#398394)
    + KMyMoney does not prompt for password when connecting to
    database (kde#398409)
    + KMyMoney does not work properly when changing from one file to
    another (kde#399244)
    + "show balance chart" does not show 3 months forecast in the
    future anymore (kde#399309)
    + Unable to Update Prices (kde#399378)
    + importer file selector does not show QIF files and does not
    remember last import directory (kde#399673)
  * New improvements:
    + Online web source "KMyMoney Currency" does not support price
    pairs without decimal (kde#396797)
    + Speedup loading of home page
    + KDE binary factory builds for MS-Windows installer
    + Add color coding of pos/neg amounts for 'posted value' column
    + Fix online credit transfer creation
    + Some features have been moved to plugins so that they can be
    turned off if unused
    + Provide correct version information for all shared object files
    + Improved handling of "Save as..." logic
    + Allow to add a timezone offset for OFX import on account basis
    + Moved GPG key handling to XML plugin
    + Accounts can now take a URL for direct access of the online
    banking web-site
    + Support more than one online banking provider during update
    + Added option to keep linebreaks in memo of AqBanking
    transaction imports
    + Remove reference to online balance when unmapping account
    + Added feature to make DB password visible during input
- Drop patches merged upstream:
  * Fix-build-with-Qt-5.11.patch
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch
- Build with QtWebEngine instead of QtWebKit where possible
- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1548676800">- Update to version 5.0.3
- Bugs fixed:
  * Storing and loading customized information reports in XML is
    totally broken (kde#403068)
  * Transaction contains erroneous *** UNASSIGNED *** in Tags view
    if no payee is given (kde#347685)
  * Unable to remove Payee from transactions (kde#392684)
  * 5.0 Version - Crashes when importing OFX/QFX File Using Firefox
    (kde#396831)
  * Closed accounts are removed from a historical report each time
    the report is changed (kde#397467)
  * Display schedule transactions with planned post date
    (kde#398919)
  * title of report is truncated in graph view (kde#399260)
  * Error Attempting Backup to Samba share - Windows 10
    (kde#400628)
  * KMyMoney crashed when clicking on Forecast&gt;Chart (kde#400820)
  * Cumbersome opening of multiple reports (kde#401080)
  * Price in exponential format is not interpreted correctly
    (kde#401144)
  * Windows build is broken - '_isinf': identifier not found
    (kde#401448)
  * Allow to reuse check numbers (kde#402101)
  * "Pay to" field gets auto filled from previous transaction even
    if cleared manually (kde#402120)
  * CSV importer: Opposite signs option not read from banking
    profile (kde#402195)
  * EnterSchedule dialog too narrow (kde#402200)
  * Saving confirmation asked even for unfilled operation
    (kde#402302)
  * Check/transaction number not imported via CSV plugin
    (kde#402501)
  * DB password doesn't apply while trying to save (kde#402534)
  * Unable to save data to database in presence of online jobs
    (kde#402547)
  * in remove shares transaction field tab order sticks in number
    of shares field (kde#402694)
  * Unknown account id mymoneystoreagemgr.cpp:142 (kde#402699)
  * Division by zero errors in investement reports (kde#402708)
  * Rounding problems with stock split factor cause crashes and
    errors (kde#402750)
  * Transaction editor is not reset (kde#402783)
  * Automatic category assignment does not respect tax assignment
    (kde#402794)
  * Initial state of "View/Show all accounts" is not correct
    (kde#402814)
  * The Interest pull down field missing when trying to enter
    income transaction in Investment ledger (kde#403039)
  * Cmake fails on Fedora 28 looking for LibAlkimia and Qt4 Core
    and DBus (kde#403156)
  * assigned TAG isn't shown up in scheduled transaction
    configuration (kde#403529)
  * Crash when importing qif (kde#403565)
  * SaveAs defaults to "wrong" file path (kde#403608)
  * The currency New Kwanza Angolano has been replaced (kde#403617)
- Enhancements:
  * Allow saving investment transaction without brokerage account
    if net amount is zero (kde#398133)
  * Add action to create new transaction from any view (kde#402316)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1555934400">- Update to 5.0.4. Bugs fixed in this release:
  * (kde#368159) Report Transactions by Payee omits transactions lacking
    category
  * (kde#390681) OFX import and unrecognized &lt;FITID&gt; tag
  * (kde#392305) Not all Asset accounts are shown during OFX import
  * (kde#396225) When importing a ofx/qif file, it does not show me all my
    accounts
  * (kde#396978) Stable xml file output
  * (kde#400761) Cannot open files on MacOS
  * (kde#401397) kmymoney changes group permissions
  * (kde#403745) in import dialog, newly-created account doesn?t appear in
    pulldown menu
  * (kde#403825) Transaction validity filter is reset when re-opening
    configuration
  * (kde#403826) Transactions without category assignment are not shown in
    report
  * (kde#403885) Buying / selling investments interest / fees round to 2 decimal
    places even when currency is to 6 decimal places
  * (kde#403886) No way to set/change investment start date in investment wizard
  * (kde#403955) After an action, the cursor returns to top of page and does not
    remain in a similar position to when action was started
  * (kde#404156) Can?t select many columns as memo
  * (kde#404848) Crash on ?Enter Next Transcation?
  * (kde#405061) No chart printing support
  * (kde#405329) CPU loop reconciling if all transactions are cleared
  * (kde#405817) CSV importer trailing lines are treated as absolute lines
  * (kde#405828) Budget problems
  * (kde#405928) Loss of inserted data in transaction planner
  * (kde#406073) Change of forecast method is not reflected in forecast view
  * (kde#406074) Unused setting ?Forecast (history)? for home view
  * (kde#406220) Crash when deleting more than 5000 transactions at once
  * (kde#406509) ?Find Transaction?? dialog focus is on ?Help? button instead of
    ?Find?
  * (kde#406525) Subtotals are not correctly aggregated when (sub-)categories
    have the same name
  * (kde#406537) Encrypted file cannot be saved as unencrypted
  * (kde#406608) Custom report based on Annual Budget incorrectly getting
    Actuals
  * (kde#406714) Home view shows budget header twice
  Check https://kmymoney.org/changelogs/ChangeLog-5.0.4.txt for the complete
  list of changes.</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add Fix-storage-of-schedules.patch to fix incompatibilites in how
  schedules are saved compared to previous versions (kde#406082)</changelog>
  <changelog author="wbauer@tmo.at" date="1562760000">- Update to 5.0.5
- Bugs fixed:
  * Tag not shown in ledger if only an category is set (kde#352029)
  * Budgeted vs. Actual report: Budgeted values broken if ticks
    selected to Bi-Monthly, Quarterly or Yearly (kde#393752)
  * Can't edit loan account with institution of "Accounts with no
    institution assigned" (kde#402672)
  * OFX import targets the wrong account (kde#405206)
  * Show hidden accounts (kde#407021)
  * Invalid online statement balance shown (kde#407422)
  * 21st June 2019 shows as non-processing day when holiday
    calendar is configured (kde#407800)
  * KMyMoney crashes in LEAP15.1 (kde#407902, boo#1136300)
  * Categories with different currencies, no more rate (kde#407982)
  * Crash during CSV import (kde#408026)
  * Merging payees results in error and data loss if payee is in
    matched transaction (kde#408205)
  * AqBanking File Import does not allow to select account
    (kde#408494)
  * Gnucash importer ignores the accounts currencies (kde#409098)
  * Converted amount not entered into exchange rate editor
    (kde#409428)
- Enhancements:
  * In Payees view, change "Default Account" tab to "Default
    Category" (kde#409089)
- Drop Fix-storage-of-schedules.patch, merged upstream</changelog>
</package>
<package pkgid="a00374a7696b1cd59d0947808dac51686ea903bd05fd708fa98e5bb46a67b73d" name="krb5" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="fdd9ad899b3c18b573f0cdfc615358c2f95c1aeb707f836af8093a0a86dfa69d" name="krb5" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2a0a7e80281f133b81abd41a6dd0e2fdf0c79c804d1e983949efcb4547172999" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="ef10b7a9e31e8a70f1d8301d4762048494dd8bc8d934e24a3ba17e816d8051fa" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="405a7dafbf45045aa67f208757c56162efc7cd817b37737515a32d5f0cf4d04b" name="krb5-client" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="be11a93b6f17e581f8a506d6acae5c3a01e1b0ff12dbb5e0f8dd5148771bd81a" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2ddb958e443b522e331b5e460611a4b1fad41609b0e92d25e9c9c6d327946d90" name="krb5-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="6c54a3a3c28427df194dd802eee0794e77f6f626b1bc6913a0a9236c4b7af4ef" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="aaab93767cbae3cca70409ecb1b96c66cf0d312ade266a2ad81bbada87bc1eab" name="krb5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="4399ecb9c1a32bd1b1ed674be34d292eff7270396ada991d64b14354d0e40c94" name="krb5-mini" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="ad7b2de257690316307bb94f2e16f113c467578ad94ac051ebd56f18eba857d0" name="krb5-mini" arch="src">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="63fea03a53a3c6a55014af7dbf90fc59fe200ead7a46395395334f1895a6bfa6" name="krb5-mini" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="86a2bbdf7886d77cc113cb7c68e2492c60870b777101bee011e67a152addeb55" name="krb5-mini-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="780e0452f0d7b563b479e84d442732bfda3b5062e6af22b5d8b820e6e8cfd1af" name="krb5-mini-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="hguo@suse.com" date="1455192000">- Remove krb5 pieces from spec file.
  Hence remove pre_checkin.sh
- Remove expired macros and other minor clena-ups in spec file.
- Change package description to explain what "mini" means.</changelog>
  <changelog author="hguo@suse.com" date="1459512000">- Upgrade from 1.14 to 1.14.1:
  * Remove expired patches:
    0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
    0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
    0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
    krbdev.mit.edu-8301.patch
  * Replace source archives:
    krb5-1.14.tar.gz -&gt;
    krb5-1.14.1.tar.gz
    krb5-1.14.tar.gz.asc -&gt;
    krb5-1.14.1.tar.gz.asc
  * Adjust line numbers in:
    krb5-fix_interposer.patch</changelog>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
</package>
<package pkgid="030d22a780404524b71bd5d0b82ba76aeb541b4f16ec428a0621d7839374d92e" name="krb5-plugin-kdb-ldap" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="2ff388fd93d18084d8659ddfbe9b1ab68810b7e45db0a21f55f31e8d0ca9949a" name="krb5-plugin-kdb-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="7bb6b4a8dbfd748008a18e91f1f184fd83a5a8c1c99412e1a3297262d08132df" name="krb5-plugin-preauth-otp" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="e981e82d8068e81dbdbb957fc4862fe1ac963319cf29624017a0bc143273c354" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="cf0bbe94113198493cb0f4a60b0cf4fa0b294cf2d8a091d4c206a6aff959be84" name="krb5-plugin-preauth-pkinit" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="5d47d870787662a5df59d4e41c2f4fd152ad020ea5c0d8bc0d87d24e0c943d28" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="a05ece3c3461259d25ef098c3e754ab205fcf825bd65e442a618515a7be44174" name="krb5-server" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="4e73ea14ce145a270655ca05300f658718f9bd0b2bb870116d36e8ebb2293051" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp151.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
</package>
<package pkgid="7a2a7031528ccb2e37fba2beefa51ced6752b963d63ecf4c9a723184f8bd2855" name="krdc" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="71a632f0322f016bd0dcfe1a6490890ec2a5595e367f638686c15104e5c352c1" name="krdc" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="eb714cd1e984d325aa452b925cf956434ab050a86fae1ebab400e766dbb1b45a" name="krdc-devel" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="32c4788d26c7ce95148edb00b42999c2c9059225eecaf5668849dda9992779cd" name="krdc-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Include minimal appstream information
  * Add .arcconfig file</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Add option of connecting to the vnc server through a ssh tunnel
  * Enable override warnings (on gcc)
  * Small typo fix
  * Make gcc happy
  * No need for such a big margin on top now that image is gone
  * Remove needless space-eating header
  * clang-tidy: modernize-use-nullptr
  * clang-tidy: modernize-use-override run
  * CMake: Fix AUTOMOC warnings</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix deadlock when user cancels ssh password dialog</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Fix minor EBN issues and typos
  * Remove duplicated and outdated QT definitions</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * properly show xfreerdp runtime dependency in cmake summary</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Set StartupWMClass in desktop file</changelog>
  <changelog author="wbauer@tmo.at" date="1557316800">- Add Do-not-assume-framebuffer-and-scanlines-are-32bit-aligned.patch
  to fix broken VNC display with color depths other than 32bit</changelog>
</package>
<package pkgid="363bf63c3849a425794a68b6686cde08820d98627033866a8771235a1091392b" name="ktnef" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="12a71d8c00d78d1879eca15229cf9647ad75bb7ea4499cb4c15f0f7a4d6e0372" name="ktnef" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.7.1"/>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Set focus to viewer when we use esc
  * Distinguish between settings and explicit overrides for external content</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Bug 232911 - "Reply Without Quote" does not open message composer anymore (kde#232911)
  * Fix show two icon when we use kontact.
  * Fix warning about shortcut</changelog>
  <changelog author="lbeltrame@kde.org" date="1529582400">- Add explicit requires for pimcommon libraries (libKF5PimCommon5 and
  libKF5PimCommonAkonadi5) and for messagelib</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix Bug 395353 - kmail doesn't honor Subject and In-Reply-To in mailto: links (kde#395353)
  * KMail: don't move the mainwindow to the current desktop when invoking a composer
  * Fix typo in argument name
  * Allow to make working as an email when we forward message as attachment</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Fix enable/disable print action
  * Add warning when we can't print message
  * Add "Add Followup Reminder..." entry in messagelib popupmenu too
  * Port to setAutoSaveSettings so that saving happens before hiding. (kde#396339)
  * KMail: don't sync after save, don't reload after last sync</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Squeeze title menu
  * Remove unused action
  * Add missing action + use zoom_menu directly
  * Remove unused action
  * Fix Bug 397717 - "View Source" option is on 2 menus i.e. "View" and "Message". (kde#397717)
  * Backport setting for delete-without-confirmation from master, without GUI.
  * Fix Quota progress bar for quota limit of 2GB and more</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Don't show quota page when quota max &lt; 0
  * Allow to restore with mailtransportname and identity name.
  * Initialize with identity
  * Emit signal when identity is not found
  * Fix use identity, it will select correct send folder now.
  * Fix Bug 397937 - Kmail wrong trash icon (kde#397937)</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix show html format
  * Fix save format
  * Fix Bug 395711 - Since last Update kmail didn't load external images anymore (kde#395711)
  * Fix icon in notification</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="wbauer@tmo.at" date="1542888000">- Use gcc7 to build on Leap 42.3, the default 4.8 is too old</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Fix mem leak
  * Fix potential mem leak
  * Fix mem leak
  * Fix mem leak
  * Make sure the unified mailbox dialog is only really shown once
  * Remove unused method</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix Bug 401685 - context menu option for mailing list actions confused about which list is relevant (kde#401685)
- Add upstream patch 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch:
  * Fixes Kmail crashing when trying to open a mail (kde#401419)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * unifiedmailboxagent: Stop using std::optional.
  * Fix Bug 402378 - mailto staement , uncomplete url past to kmail composer
  * Make sure that it doesn't crash here
  * Fix Bug 401419 - Kmail crashes on trying to open any email (kde#401419)
  * Fix add parentwidget
- Dropped patches, now upstream:
  * 0001-Fix-Bug-401419-Kmail-crashes-on-trying-to-open-any-e.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix Bug 403313 - Encoding problem on kmail2 5.10.1 when creating composer from command line (kde#403313)</changelog>
  <changelog author="wbauer@tmo.at" date="1557403200">- Add upstream patches to fix "Move to Trash" action in the scam
  detection menu permanently deleting the mails instead of moving
  them to the trash (kde#406324):
  * Fix-bug-406324-move-really-to-trash.patch
  * Fix-bug-406324-fix-connect-signal_slot-error.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add Fix-Bug-407967.patch to ensure that the "To:" field always
  has focus when creating a new mail (boo#1136481, kde#407967)</changelog>
</package>
<package pkgid="c42e4635ce2014eed755a113fff53d41627cc136fd49e3e6e22c711e35f01736" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="8f9bba4e66f1183c610bc87b6d14e0ab443758d07f6b258e06a9ef98cc20fabf" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="275c8556202ddf1635c498d3a47ed68a2c27463d5bceae719433e843dae56313" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="0d78089c2515a09d95052cd907ebf57c59598fec1b35cf4a0145ea18f5f0547e" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="be9dc7423cf6354a12075de969f63190d02325cfb5175a9412281a19b447b1dc" name="ledger" arch="src">
  <version epoch="0" ver="3.1.3" rel="lp151.3.3.1"/>
  <changelog author="jmatejka@suse.cz" date="1421928000">- Init package</changelog>
  <changelog author="jmatejka@suse.cz" date="1423224000">- Install license file</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438516800">- Fix build with boost 1.58:
  * add ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * add ledger-3.1-fix-build-with-boost-1.58.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1453896000">- update to 3.1.1
- drop  ledger-3.1-fix-build-with-boost-1.58.patch
    ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * Added a --no-revalued option
  * Improved Embedded Python Support
  * Use ./.ledgerrc if ~/.ledgerrc doesn't exist
  * Fixed parsing of transactions with single-character payees and comments
  * Fixed crash when using -M option with empty result
  * Fixed sorting for option --auto-match
  * Fixed treatment of year 2015 and Y2014 directives
  * Fixed crash when using --trace 10 or above
  * Build fix for boost 1.58, 1.59, 1.60
  * Build fix for Cygwin
  * Various documentation improvements
  * Examples in the documentation are tested just like unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1473768000">- 465.patch
  + Fix compilation with Boost 1.61 (boo#994382)
  + upstream PR https://github.com/ledger/ledger/pull/465</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- cleanup specfile - install license as %license
- boost_168.patch: fix building with Boost 1.68. Sha1 compatibility
  header was removed from Uuid library (boo#1105084)</changelog>
  <changelog author="lars@linux-schulserver.de - 3.1.2" date="1553083200">- update to 3.1.2:
  + Increase maximum length for regex from 255 to 4095 (bug #981)
  + Initialize periods from from/since clause rather than earliest
    transaction date (bug #1159)
  + Check balance assertions against the amount after the posting (bug #1147)
  + Allow balance assertions with multiple posts to same account (bug #1187)
  + Fix period duration of "every X days" and similar statements (bug #370)
  + Make option --force-color not require --color anymore (bug #1109)
  + Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  + Add support for --prepend-format in accounts command
  + Fix handling of edge cases in trim function (bug #520)
  + Fix auto xact posts not getting applied to account total during
    journal parse (bug #552)
  + Transfer null_post flags to generated postings
  + Fix segfault when using --market with --group-by
  + Use amount_width variable for budget report
  + Keep pending items in budgets until the last day they apply
  + Fix bug where .total used in value expressions breaks totals
  + Make automated transactions work with assertions (bug #1127)
  + Improve parsing of date tokens (bug #1626)
  + Don't attempt to invert a value if it's already zero (bug #1703)
  + Do not parse user-specified init-file twice
  + Fix parsing issue of effective dates
    (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  + Fix use-after-free issue with deferred postings
    (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  + Fix possible stack overflow in option parsing routine
    (bug #1222, CVE-2017-12481)
  + Fix possible stack overflow in date parsing routine
    (bug #1224, CVE-2017-12482)
  + Fix use-after-free when using --gain (bug #541)
  + Python: Removed double quotes from Unicode values.
  + Python: Ensure that parse errors produce useful RuntimeErrors
  + Python: Expose journal expand_aliases
  + Python: Expose journal_t::register_account
  + Improve bash completion
  + Emacs Lisp files have been moved to
    https://github.com/ledger/ledger-mode
  + Fix build under MSYS (32-bit).
  + Fix build under Cygwin.
  + Various documentation improvements
- removed upstreamed patches:
  + 465.patch
  + boost_168.patch
- add libboost_system-devel as build requires
- package the bashcompletion script as config file
- re-introduce BuildRoot and defattr macros for older distributions
  (they don't harm on newer ones, so don't use a if condition)
- get rid of the suse_version conditional for boost libraries, as
  the package gets build only from SLE-12 and beyond anyway
- do not use macros in the URL, as OBS is not expending these for
  the WebUI</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1554811200">- Update to 3.1.3:
  + Properly reject postings with a comment right after the flag (bug #1753)
  + Make sorting order of lot information deterministic (bug #1747)
  + Fix bug in tag value parsing (bug #1702)
  + Remove the org command, which was always a hack to begin with (bug #1706)
  + Provide Docker information in README
  + Various small documentation improvements</changelog>
</package>
<package pkgid="588c02874a9598c297d61ff1e1bb99335e011b2671c249a465949ddbb5e58c3d" name="ledger" arch="x86_64">
  <version epoch="0" ver="3.1.3" rel="lp151.3.3.1"/>
  <changelog author="jmatejka@suse.cz" date="1421928000">- Init package</changelog>
  <changelog author="jmatejka@suse.cz" date="1423224000">- Install license file</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438516800">- Fix build with boost 1.58:
  * add ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * add ledger-3.1-fix-build-with-boost-1.58.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1453896000">- update to 3.1.1
- drop  ledger-3.1-fix-build-with-boost-1.58.patch
    ledger-3.1-convert-boost::optional-objects-to-bool-explicitly.patch
  * Added a --no-revalued option
  * Improved Embedded Python Support
  * Use ./.ledgerrc if ~/.ledgerrc doesn't exist
  * Fixed parsing of transactions with single-character payees and comments
  * Fixed crash when using -M option with empty result
  * Fixed sorting for option --auto-match
  * Fixed treatment of year 2015 and Y2014 directives
  * Fixed crash when using --trace 10 or above
  * Build fix for boost 1.58, 1.59, 1.60
  * Build fix for Cygwin
  * Various documentation improvements
  * Examples in the documentation are tested just like unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1473768000">- 465.patch
  + Fix compilation with Boost 1.61 (boo#994382)
  + upstream PR https://github.com/ledger/ledger/pull/465</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- cleanup specfile - install license as %license
- boost_168.patch: fix building with Boost 1.68. Sha1 compatibility
  header was removed from Uuid library (boo#1105084)</changelog>
  <changelog author="lars@linux-schulserver.de - 3.1.2" date="1553083200">- update to 3.1.2:
  + Increase maximum length for regex from 255 to 4095 (bug #981)
  + Initialize periods from from/since clause rather than earliest
    transaction date (bug #1159)
  + Check balance assertions against the amount after the posting (bug #1147)
  + Allow balance assertions with multiple posts to same account (bug #1187)
  + Fix period duration of "every X days" and similar statements (bug #370)
  + Make option --force-color not require --color anymore (bug #1109)
  + Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  + Add support for --prepend-format in accounts command
  + Fix handling of edge cases in trim function (bug #520)
  + Fix auto xact posts not getting applied to account total during
    journal parse (bug #552)
  + Transfer null_post flags to generated postings
  + Fix segfault when using --market with --group-by
  + Use amount_width variable for budget report
  + Keep pending items in budgets until the last day they apply
  + Fix bug where .total used in value expressions breaks totals
  + Make automated transactions work with assertions (bug #1127)
  + Improve parsing of date tokens (bug #1626)
  + Don't attempt to invert a value if it's already zero (bug #1703)
  + Do not parse user-specified init-file twice
  + Fix parsing issue of effective dates
    (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  + Fix use-after-free issue with deferred postings
    (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  + Fix possible stack overflow in option parsing routine
    (bug #1222, CVE-2017-12481)
  + Fix possible stack overflow in date parsing routine
    (bug #1224, CVE-2017-12482)
  + Fix use-after-free when using --gain (bug #541)
  + Python: Removed double quotes from Unicode values.
  + Python: Ensure that parse errors produce useful RuntimeErrors
  + Python: Expose journal expand_aliases
  + Python: Expose journal_t::register_account
  + Improve bash completion
  + Emacs Lisp files have been moved to
    https://github.com/ledger/ledger-mode
  + Fix build under MSYS (32-bit).
  + Fix build under Cygwin.
  + Various documentation improvements
- removed upstreamed patches:
  + 465.patch
  + boost_168.patch
- add libboost_system-devel as build requires
- package the bashcompletion script as config file
- re-introduce BuildRoot and defattr macros for older distributions
  (they don't harm on newer ones, so don't use a if condition)
- get rid of the suse_version conditional for boost libraries, as
  the package gets build only from SLE-12 and beyond anyway
- do not use macros in the URL, as OBS is not expending these for
  the WebUI</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1554811200">- Update to 3.1.3:
  + Properly reject postings with a comment right after the flag (bug #1753)
  + Make sorting order of lot information deterministic (bug #1747)
  + Fix bug in tag value parsing (bug #1702)
  + Remove the org command, which was always a hack to begin with (bug #1706)
  + Provide Docker information in README
  + Various small documentation improvements</changelog>
</package>
<package pkgid="dba8952723b47ba726ff5e3483cc25de027f066b95f8f48767d0db5678d94c5f" name="libBasicUsageEnvironment1" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="81f67f8d40cc01f4271c5e18929f45b790727c59a8799328eb238ce1d4728fed" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="37647e074f19011dd5b5fa8f8acc70e9c2dbece6f462250183a5d7a1abc9f4a5" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="35dd2b4b7f4e5b156c145fa23398ce13b90e66bebb96e948556f1b62b7d9d588" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="9cfba349f0b3b4379a9d56b844aacf4f64b6a814a277765bbb9cfe8e913d1f3f" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="f0a2610cb6b61e2c381041fac37b00082483fc3d56d3f25888d024e6da53eca0" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="6020c5d4350fa4c981b3d39c94e8d75bd2a05ba5f57997d259a7e95dd9b221b1" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="4b35e89dd969f4534824d0eb91580f2a9621f4b667a6c85871dd390f57fdc342" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="75dd2e927b2452b1f1630ee69d1744ed71fa2baa1bab82a226cb161c5dbede97" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="3f3259870168209959cfd2ac4668b931dd21b2a5abfff1cb4a7dd28163c5751a" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="f3ba55b087f2605effabccbda46c2499b479ed1c18ac24b9f133643a7a59fe9f" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="01924cc9cd3f5cb51949c017806c9ffa89d88ab8e38352b522b636c00123de8e" name="libIlmImf-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="476e33a6e252ab54a59a964d89969e25c2efd3d4651bb16ed386d048d4326512" name="libIlmImf-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="9df95ca2b93adde59fbd435ea0b7cba29ec49dd780c9b6f58d0ba07c74eb24ef" name="libIlmImf-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="80920ec21b16021c75fafed1d95628e5082089cd500cc2af7d786c614fa2c181" name="libIlmImfUtil-2_2-23" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="cd42ae6c39ab069367a0fe99bee8d28465f54e64402cff814ea29af6fa29297b" name="libIlmImfUtil-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="d4d27290fbad261b26c5aaa4bfed149710879061528a74f7d21d0901e389d81e" name="libIlmImfUtil-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="e2b9c6b19313ac5b7210f2137be0a59c40014528a5a8ac72a5fdcf0e2985c0eb" name="libKF5AkonadiAgentBase5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="2ff80645ce9bc06108b414c09d634dafc1cd9fc7351a77c6ff61704522cdcd6b" name="libKF5AkonadiCore5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="a14e33febb69fc119458e4060baaaa50f6b0a16521b4bcb628163dcd86b7c2f6" name="libKF5AkonadiPrivate5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="6e17534b9fd69ce2a6c46128c5117972dd216bdcfa1cad0bacd7d02ee5e68676" name="libKF5AkonadiWidgets5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="f2b87573575ed9106de35f36dd233005492223decc649edef079359f4b7519d8" name="libKF5AkonadiXml5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.3.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * TransactionSequence: fix rollback not finishing properly.
  * Akonadi tests: make checkTestIsIsolated work in release mode too
  * Fix session not reconnecting on Qt &gt;= 5.10
  * Warning--
  * Fix handling of cut collections.</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix a crash due to access of temporary object
  * Fix MariaDB initialization when mysql_install_db is missing (kde#392948)
  * akInit: improve error message when renaming old logfiles fails
  * StorageJanitor: handle external parts DB entries with missing filename (kde#395743)
  * Server: handle race condition on connection shutdown (kde#394071)
  * ActionStateManager: separate selected collections from favorites.
  * Document the hidden mechanism by which these methods are called...
  * Resourcebase docu: don't call changeCommitted from itemRemoved.
  * Fix caption/text</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Build with gcc7 on Leap 42.3</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Don't fetch missing parts from the resource.
  * Revert "ProtocolHelper: only unserialize payload we requested"
  * Monitor: rebuild Item from ntf if it's mustRetrieve but IFS is empty (kde#397131)
  * ProtocolHelper: only unserialize payload we requested
  * Fix warning due to deleteLater on null object
  * Server: create new Collection in a single step
  * Monitor: fix broken subscription to only Item or Collection ntfs
  * Server: fix Item notifications being rejected on mimetype filters (kde#396781)
  * Monitor: invalidate pending notifications on change
  * Notifications: retrieve Item when RID is missing
  * DataStore: don't access mNotificationCollector directly</changelog>
  <changelog author="wbauer@tmo.at" date="1535457600">- Add upstream patch to fix crashes under certain circumstances,
  e.g. when searching: (kde#397239)
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Attempt to mitigate trx deadlocks with SELECT ... FOR UPDATE
  * Fix crash when NotificationCollector does not have Connection (kde#397239)
  * Akonadi: forget about jobtracker if akonadiconsole went away
  * Akonadi protocol: an invalid response is still a response.
  * Use nullptr to fix gcc7 warning
  * JobTracker: publish all jobs in the session when first connecting
  * Debug output: show which collection we're syncing.
  * fsck output: print out collection ID as well, for items with no RID
  * Disable remote logging for inside Akonadi Console process
  * Split out search-related debug output into own category.
- Removed patches, now upstream:
  * Fix-crash-when-NotificationCollector-does-not-have-Connection.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Job tracker: fix expected reply signature, improve error handling
  * Fix icon name
  * Fix "QCoreApplication::postEvent: Unexpected null receiver" warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Fix StorageJanitor SQL error in duplicate detection
  * Fix KOrg category color customization crash (kde#398459)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Akonadi: ignore remote ID if it's empty</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * Fix ModelSpy (and thus some model tests)
  * Fix ItemStoreTest
  * Fix creating new tags with null parent</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Ensure StandardDirs::saveDir returns existing dir
  * Fix SQL syntax error in findOrphanedItems()
  * Handle query prepare errors in QueryBuilder::exec
  * not necessary to check twice
  * Remove not necessary lines
  * Allow to sort list of folder.
  * Fix mem leak</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix aggregation logic for cacheOnly and ignoreErrors.
  * autotests: rename notificationmanagertest to notificationsubscribertest
  * Extend tagtest with more checks that the full tag information is sent.
  * autotests: remove QEXPECT_FAIL, the mysql bug got fixed.
  * Fix tag name/type/gid missing in notifications about tags.
  * Minor: improve QDebug output for Akonadi::Tag
  * actually look for mysql binaries in PATH
  * Allow to exclude unified mailbox from local subscription</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Small code cleanup: use local var instead of pimItems.at(i) many times
  * Fix intermittent race in collectionattributetest
  * Use an emit syntax that QtCreator understands better.
  * Remove unneeded warning for killed subjobs, error string was just "".
  * Add missing Q_EMIT before signal emission.
  * collectionattributetest: small cleanups
  * Server: Improve debug, warning and error log messages
  * Destroy the Connection Through the Session Thread (kde#381636)
  * Akonadi: fix racy code in (MimeType|Resource)::retrieveByNameOrCreate
  * Akonadi: fix timing-dependent failure of partstreamertest
  * Akonadi: add missing dependencies on included XSL files
  * Fix SQLite backend foreign key PRAGMAs
  * Simplify AggregatedFetchScope code, removing all setters.
  * Fix tag change notification shipping a bogus name.
  * AggregatedFetchScope: fix fetchAllAttributes for tags.
  * Properly clean up scopes when deregistering a subscriber.
  * Fix "QIODevice::read" warnings.
  * autotests: partstreamertest: show more info on failure</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1554292800">- Add upstream patches to fix regressions when checking mail:
  * fix-regression-when-updating-attributes.patch
  * fix-collection-detaching.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1557489600">- Add fix-unhandled-exception.patch to fix a possible crash on
  exit (kde#401692)</changelog>
</package>
<package pkgid="a70ea3f782e41cd09278157f27f44d50aa25b22185b051696e29966f184fcde2" name="libKF5IdentityManagement5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Add renamecategories
  * Fix some warnings
  * Use override directly
  * Use QLatin1String
- Fix descriptions</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * USe Q_REQUIRED_RESULT
  * Don't use deprecated api</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * Add signal when identity is not found</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Don't show dialogbox when we open configurator
  * Add warning if signature file text is too big
  * Rename slot
  * Reduce type of file to txt file
  * Define type of files
  * QT_NO_NARROWING_CONVERSIONS_IN_CONNECT is defined in kf5.51
  * Use new syntax</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * No code changes since 18.12.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix show error as utf8</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="wbauer@tmo.at" date="1557576000">- Add Fix-Bug-391631.patch to fix newly created itentities not
  showing up in the settings dialog before kmail is restarted
  (kde#391631)</changelog>
</package>
<package pkgid="386b645e2bf5ae96032ad96bb8cc68b811ef97b74af25419a5247472adba368f" name="libKF5Plasma5-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="451860315953d5972cd9f088f8b9a4b5cf2084337cf9e8c735697c821032e6b5" name="libKF5Plasma5" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="1650e95e8a892cb68b32f1717fb86ff2715a848b372dc14abad600c97305acb6" name="libKF5Plasma5" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="8baaa103c6d663c46b65103cce7dbe82c1df8d0f61d8c3749526c4f31a9a014b" name="libLLVM7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ec005bb3c8ed03e28bc3b1c0fbdf28a5bbfc9ab39b093dfc8b7d54a6d428ed76" name="libLLVM7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="524aa240da71f6b75f6d39e34279af95a67325ef63db89733c428634fa5cb411" name="libLLVM7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="cea6309a34becc3c5e3412393e4ece95e9e54bb635aee7b8942ed163a18df887" name="libLTO7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="196c1ddde5b32874d5fd902f8a22593ec5ba52934aa8ae4caab27618257d4b21" name="libLTO7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="6263eb28c333b51b5e9f8bbd71042f930b6e5fe5d8393985b4075d931ffa6460" name="libLTO7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="966521c35559ffd0d70eff29c1364128a3738ac44384fdcea114f341dc6f502d" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="c1b3f3f90510580f5b4e9d1e34ed0c22d6e1f913a4fd7b4463d280af213ea7bb" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="d0fd5e1583ec7bf51f1302132daa107611f7628757c313cc76504b9160735e3f" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="59470c273f847767886eda0159f28de6203e1e79477b18f1c39e50aa8603f908" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="6f1749a0fcf887b0942423cb5ea859ecfa64ea2e3e97beee6d4614dacad664f4" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="487f4378f2ed6d1854ea2be02651644dbd923e28a210eb5b8059872246a1df96" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="f0e961b435cf8b3abc8decdf5d7b0e2f0ef4363103ced4458da7696232a86003" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="2af1dd11319da4282978a4916e55c73cac0ea43ef7153512513eee9de0c76d91" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="fa4b53f6e31e7f105a070b29595626051d353bc9be2e913716ea5c88b2b3e866" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="f7882fb7acb1b7a7ba6b6f23edc4d0605e10d5a885a59382eac2911fe6c33421" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="a5f31729a5f2767732a857f42d19b154017f3a8e76eb40fefbabaddb02eef37b" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="7cb5dec0fc68f3f401718a63bf4a482b43530cdd857c89db26590a9c3d408326" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ab9a2608d3855ab22cd29cc330c06e6354f841d53c3e6094c2afbe799b6816ad" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e4f9fe5df37b523f88f050bfa3215072bc696476271bbb011a15fea01f5c75e9" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="0d720f338eadd9768b72d2c8d187c32228fc33aac388c909a7ac74c9b951939d" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0cc444fbdc7810f70d99f2863e134dc666aeacbec24186595c85616b612f175a" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="9ed715195e9a2389b2a36e6c951a506874e6acda42716dd9d0fff1c29fd5f308" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c56500c6038c3a361c9b5be3c405072f783f523d0cbe9a308185e8708816c0f7" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="4bcd0b9a65a3a2d6244e36969e3bb0ea3bb6e42b26eba41a162719af3c5ce362" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="919c3c5545ac6157e505ecd6dcafd4ce41906a1955f8e149ef05121c83a27608" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="e10aa9d9670521e60fe58de41957143ebd868b2aaf3c415f781a2b880bcd384c" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="42b799c2ce13290a199ea9301eac2799d9a0f14043f4d2ff82a39780bc7a5286" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="732218940c3f8d6bc12e48641ca4da42f8f28d1b2ee249e8f4d5027e1280e53b" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="ddfbe16a68d19faa0c2104da3c86eda8654cdf7ed8bda334a1e36af8c582c9ea" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c4241d7ae9a2599c39df91dc9492f9730ddfaf24ae4bbe018211688c8d602db6" name="libSDL2-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="cee782036b0698c92e4becf68e54c4e2705af9291551c2195cb6c3598d374e5f" name="libSDL2-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="1b3f3b6a22714fe6d76467d67582043acd1691a500acb8f01c651c343dc80acb" name="libSDL2-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="0671e5fa34bd92cf77003f343ed5c9212d2721c33b59011329e95b9805db9124" name="libSDL2-devel" arch="i586">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="3f21808b24a2f7b3138366536dfe9ea286d12dc5098f61503a0848b67a94614a" name="libSDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="5945bc91f54d6321673e812132898ba15e459134e1d4e4a8f0869f92da695558" name="libSDL2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp151.4.3.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="188ba74ba71198c8c75ec6f83248a965a65eab222bb0658817e3d3efade159a7" name="libUsageEnvironment3" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="e98e628433a19fa7313eb49808e1b431ef245cdd7625b923cea2178f4b516087" name="libasm-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8bbeb4327142b18ac6880b220f40fa96a1d623886bec2b9b215b630e42c25c2e" name="libasm-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="893a9938d6a9ae48d907f328fc792eb8a210a7710c721ac58859766038a2239f" name="libasm1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8716c035b094d74f11fe0866f66cc3e94acb6db6e47698ad93e25c481b7fad43" name="libasm1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="381171152f0e8d69780a8d6bd9a31b43704ce514ea10c8f8b40100f9fc2f3ef8" name="libasm1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="85beb3d65893a9a7153e76c5cebf307d9905ed258abd12f294c2aac8f5439f13" name="libaubio-devel" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="0a421d3c226860ae904d9682dbdbc8ed074267c5a68d4b352be6ab2ef3c7d399" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="9a0a13639523bfb4333b11310ffd2e299cf8984717b376948c6fdf12d8b47382" name="libaubio5" arch="i586">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="485811351009338fa8e8889c687870e2027be4ec7de9d178079d62601ce326a9" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="ef956959c005a7e330e960c405ed52de3fa0558515fa9f28d14c40548c646bc9" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="1956102f4a3bdc77683f0e384fa2c3b8421cb810bed0f9cf9fe0736bf146612c" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="0c411f8ef708fb28fb7aed9ee0d13c7899cb97494ada7de31bbd686afc20dfac" name="libbind9-160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="bd005135a5101d59a2e41b16b6ea89e70eab23e231535f0ca3378bea4ad02840" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8be9e9fca07fce9d6903f7befe2ded5ccb1eb5ced4e4c2f74c1651657b84ae97" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="3d839e0f27cc59f4dd9208d072a451f7220f3893e9aff2dec0c6b11dc73decd3" name="libbluetooth3" arch="i586">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="5c88f12a473da0d929629f645d651dedce2ae1048b7ff6faaad9a1940cd78e40" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp151.8.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="100ea759165be15461846721fa906dd1db6771b6760972aef042121f4226b1fe" name="libbz2-1" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="073692a8a1c5c018b130fa2d624ffe83c935e9940d08041dd9c449e3c563dc8c" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="01db11ad15b6130a99d3e9d967e0db8d633c2cd7ba334cf8a2940b5c0fb0e598" name="libbz2-1" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="e7e8f5b4c791cad19b1ed8359d671ccd45c0ed12848d9a69a399f32ef933bc72" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="05e583d4d2282cf3eaf01b00c44c560d99b614735f14d3848f70b05e541e8ad0" name="libbz2-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="ad1110cd8bbdf259bf19c192058b96c010bc74747c7d15b44eb455b953d61b4c" name="libbz2-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="6538ec9977fb69dc984d525d702abf64d19e0ff0db56751f15826ef79f9ea145" name="libbz2-devel" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="731eef0845e6a7c8bff45f2ce43f8daccba2520ea3e6a201c364b668e59caff5" name="libbz2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="c5dc09693cc0c2efae0b42badf08a2275ac26f18945d4687c9d0272f76986a5d" name="libbz2-devel" arch="i586">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="dbf122debf5acef3f519d7318a156b7e5dc2c6c9ad94d10b37fa748b8b32f373" name="libbz2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="8c38deb4aaa6f4207345e808579bd81c9a35a192a59d05a4add1a6fb16cd6103" name="libbz2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="3683c2a3aeb09f6de2209a32740c0ec0e83684df0b351d53ebebc47820b7f13e" name="libbz2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp151.5.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="65ac9a4514b6d4698417285cf72f0fb2cb6e218675092d4ffc9deb882fba2a18" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="0e19dc145fe401fde90ff314f293b6aa9ae49aca361885cd0d482ac06e5fd86f" name="libc++1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="c45e07761f582bb6b86a3ce70f6766aa266bd687c2646b796e791511352846aa" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="dd6cb9e326a095ffbbbb4907ec8a9a5c213bcb667d75a9f80d5df77da3427e3e" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="728d1b519a4f1469f5310157d93e4af41641baa472d36b1be9ee328bc5188a1f" name="libclang7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="2a4a5428c209728ae9b367c61c3074affab0fa3afb8b9d52f01fb14608a5e930" name="libclang7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="94c681b51d4bf3bda1a904c848e12f1e69570e6864e0ff80c8badf13a7c30362" name="libclang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="274337df2668f1bfbab0321eac4b6cbf919d51d9da85c98d30bd1a199ab136ef" name="libcom_err-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="ea498abcb2462935a2df6e4eb04d62cca236a6334c729a67abf5b5cdd16df28f" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="612f1fa45fde97e5fe57ddaafec0245bf58483875444e77108adeacaa7853388" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="471382f5e87906b2affadd56cb6f0f3d619e1786fb667506e7f4c7634dd04eb0" name="libcom_err-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0b9a1ed1511fd3ae32b379b9059ecef50c4af7ab0d4ad63fdf997b05e761c21a" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="6b0f155f2d0d1f98c9bfbc111ddd409943002bffddf72cd3668e4913fcc00671" name="libcom_err2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="a3af4a29834fc54e6a16fcb420dfdd405ccdd2cfac82f2df283ee0f6ab112604" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="4fd1b13f409b4c9402a114671429becc2763be1f18546cf1abdb03b1cb289de4" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0f7da43b8919bda8fde1a7f8a0f0e6e26ee4c80e1d52e802d5402a44a6ef1dfe" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="9825c0731e2088964ee50228acbbb2f48e0e4feee4095bc4c922a738771bd312" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="f24421c24f083edf1348db4bc7022de27f184b6e07a33d8bc7d81531d44b9f5e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="f831a86027af76f5dea3f20fe88df3e5f22a5ac170664496dab1ea403d9debef" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="2a540b5450767e309830db1598aafd5ff471eb5907ec429ab990b37702044241" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="b7604ac612893dd7d52340e46e583c03afa91369fce602d4dd0c312fce501198" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="38c6c34ce6b1e74842e677431c2c1364d7b73316f37622c85b5de26e4e72b428" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="74c43b219672982dd5bd3aae747c2635539c866ab2a9d5121b778c05154be5dc" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="e945052d85facdd6d5237f37de1584552d044afb8343e98a554177ba7b376d40" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="df77cfd0529811f90066b6192b77db4d73fe8b79fb379b55ef4c12029067b845" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp151.5.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="ee2ec48ffe5e0c0249b88d3cac171628b0c79ff82e4b2dced05ffdf1d835d554" name="libdbus-1-3" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="160457d3f3423279b72303b3bf35ffe0aa33f7e39ac7d1695b0854ee85a11ff0" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="505cb7963990c668f85eb7a74bfe77c7e0268a0bf4a4a61a77dc031061a911f0" name="libdbus-1-3-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.4.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="fd210bd85fc780521a3c4e3a8e8c6e31245e26e54bea4c000d447028273b4d04" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="cdf0d67c9c7e22799ea5958e3d0888e0841f77bbd1d7718352a1bf32abc1a00b" name="libdcerpc-binding0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0864a5daca286711625db87bf754b54502cb0c85e102f0e5b3562041b52986ab" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="db35d02c3be8c1e3d08e10878b75bc49d1419c6db6360b35424dc8965ee0b6b6" name="libdcerpc-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7b4febc2ea761778c9f091498585cc5338f84e743194d4285cc98455893621d7" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="965dc6479b14920272523fe35d3653a935ddcfe7aa5b8bba3ff164d8fcd09f03" name="libdcerpc-samr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4626aa8b2fc12a790456ba68e6626b27d04bb025bf89d6f508d0da7d3b5e96bb" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6d1bb4174922360824afadc1abc09593d0cd21287085fdcf0d3efee3a60746e4" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e3316dccd7d301c14b7bd43d08f8860f205f94cce278ff0eff9aa4040fcb2b6d" name="libdcerpc-samr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8c021ba594654829966bfeb0acf2db70126c35f93ca881fc478e51609d37df82" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b725061eb4d3a6bb907e52d652750740adc4a3b5df14ec84130e75826ade57cf" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="beacc9dbb0e582604aa1b187a7dd18fbbb570c471005786d9196d8d9ac4fa152" name="libdcerpc0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ee415455e4a09b75610b4410250dadbe71ada44b65e668048598854c92f56e79" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="18aa991417d55ff5989c722e3db312382ac98c8f2d0b4531712b8af2e82c3bca" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4aebef708184c7629e494046c703d943efca1aca7f852728e228dde0871f9a21" name="libdns169" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ee70b2dfee226afc702b225fbd02ce4f520ddff050eb333135a64baf5dbde58e" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="3bbd3e13e7f830d2c4808fc57f68717a81f6660ff9636df38f5933ad4c30fa6b" name="libdolphinvcs5" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Refresh patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
  * dolphin-go_up.diff</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * Fix untranslated places panel entries (kde#392822)</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Don't filter out duplicated entries from places panel (kde#393528)
  * Update window title after closing split view (kde#385111)
  * Add failing test case for bug #385111
  * Fix inconsistent preview spacing and icon wiggly-ness when toggling previews in Icon mode (kde#393306)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * Fix crash in PlacesItem::setUrl() (kde#394507)
  * Add missing i18n call (kde#394194)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * Fix loop of FocusIn events
  * [KBalooRolesProvider] Support properties of type QStringList (kde#395033)</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here
- Refreshed patches:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Remove custom icon selection for trash
  * Compare UDS entry times directly instead of going through KFileItem</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Pretty-print "creationtime" role</changelog>
  <changelog author="wbauer@tmo.at" date="1538049600">- Add Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch to
  avoid an "Ambiguous shortcuts" error on startup when running
  dolphin on a different desktop than Plasma
  (boo#1109372, kde#398324)</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * [PlacesItemModelTest] More index-related fixes
  * [PlacesItemModel] Fix testSystemItems()
  * [PlacesItemModelTest] Fix testHideItem()
  * [PlacesItemModelTest] Fix testTearDownDevice()
  * [PlacesItemModelTest] Fix testDeletePlace()
  * [PlacesItemModelTest] Fix testGroups() test case
  * Follow-up of commit 9760f9607d
  * [PlacesItemModelTest] Check whether Desktop and Download folders exist
  * Fix disabling of DolphinNewFileMenu
  * Add test cases for enabled status of DolphinNewFileMenu
  * Fix that dragging a file can trigger inline rename. (kde#398375)
  * Don't assign twice the same key to the action New Tab (kde#398324)
  * Do use QIcon::Selected for non-icon view
  * [KStandardItemListWidget] Round to icon size before applying scaling
  * Correctly save behaviourOnLaunch (kde#398022)
  * Don't use QIcon::Selected state for selected icon (kde#398014)
- Dropped patches, now upstream:
  * Fix-that-dragging-a-file-can-trigger-inline-rename.patch
  * Dont-assign-twice-the-same-key-to-the-action-New-Tab.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * Don't enable two-clicks renaming in single-click mode
  * [KStandardItemListWidget] Pass icon state to overlay painter
  * Update hidden state correctly (kde#399599)</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * Do not disconnect all StorageAccess signals when unmounting (kde#400992)
  * Improve Ux for the places panel's hidden items (kde#400860)
  * move kcrash link to dolphin app (which is the effective user)</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * KItemListWidget: Use initStyleOption
  * Fix selection when navigating back, with size sorting. (kde#352296)</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * fix display of image orientation
  * Fix title update when changing active split view (kde#402641)
  * Use https over http for homepage url
  * Add failing test case for bug #402641
  * Use correct icon for the "New Window" menu item</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * Fix member initialization
  * [versioncontrolobserver] Update working directory on tab activation
  * [versioncontrolobserver] Do not use static plugin objects</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * Fix crash during shutdown (kde#402784)
  * Word-wrap KMessageWidget text
  * [DolphinView] Use correct color group
  * Sort preview plugins case-insensitively</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add dolphin-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="a6f1a74384eec665c890fda6ad1141ad5411656ec5f45150d7b1eb06faff557a" name="libdw-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b1e9628ac6a7842dd64804a3190fc67d0325f24d384d547b4aabf0323a4f2c14" name="libdw-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="9513666005db767f78eba1ea342a0335e3a0a8db5d5a959f04851c01278e2d09" name="libdw1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="a0d22e2732d5790a631ef2a2b80b3892153dea67c67bc669f4e53d0e9e82cc56" name="libdw1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="deb16bbb4897195b022f88f5053d27849b0332c8bc1d1858f9da90216ff8db52" name="libdw1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="d2aa53731aaffb9a548d5723b725dd071305557d29b0c65a151e6d513774d984" name="libebl-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="8bb5f7512205eb71f60765816bd3653debdf1c73be83ad03e509a24a7a27da27" name="libebl-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="e836d6aa68631636ac84ec0f684e979d801084761b4f75440e3234e882dbc2b5" name="libebl-plugins" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="ff45c734db8acec6652a44ab7824464c85e6ed938e4aa0d5da0ab1cd4f134e50" name="libebl-plugins" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="b99578606c7fc6d277411d1746852f0a992d43697af4cd89baf48971877c56aa" name="libebl-plugins-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="6a2035be0ed33dd46951c6c0372117a77a4bfcf766b1d1b619740fcac489dc47" name="libebml" arch="src">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="30f2a2cf8ec6205b72be3ee2d106b90b13f5c975f4c396176f10099a90d2194f" name="libebml-devel" arch="i586">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="3a80dcfc39f08b25b5e04fa619d42f9898b27677be0a227791cfaf5174009f75" name="libebml-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="cec39aeac0341c9158d53d5f9f00daf0c7e727bbd2cd531bdb06e99228380945" name="libebml4" arch="i586">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="fa628a303ba8ecdd7a476a35401a1a3484e01581f7b1ec538d8e364a1bc86373" name="libebml4" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="0d00a95596bc3943a68e21164fde5227a9cb221b66e4ead98d986ad8c13f6b95" name="libebml4-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixes boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to version 1.3.7:
  * Fixed the handling of Unicode codepoints &gt; U+FFFF
- Dropped fix-EbmlSInteger-limits.patch, fixed upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.3.9:
  * Some build system related changes</changelog>
</package>
<package pkgid="96cb1c94ecef032d9e00f1da40fcb54357c3837ce0f2e352085759351789a1ba" name="libecpg6" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="83d10148568fcd224ac8c32652c0a13f58458da4d673ee2a44351f7a12cd8ac1" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="5286bbfc77d601f175c0d66312805a7c90c18253272d7298215124f6a8e2b7f3" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="3727f3398a5202198a12d039c269ee099b588c9b91cea66e1f4b1495dff6e7db" name="libelf-devel" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="6c341ac08567e1648ce4bf5e644e621b542c0f05a71cf5b94077057f02301735" name="libelf-devel" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="1fc73b67057c23a44c3b51ec657702b87745e0df30efac0bef77862974668c84" name="libelf-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="04350ac88f7fd4f638104c6953477dfd9ee3c6dbd9f8c00021a46640732ced23" name="libelf1" arch="i586">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="d7c98d6bcf12fd16bff52cfd0e97d43b2dce00bd6ff59d6b74524bc9b507afab" name="libelf1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="013a6d75415dcbf3733fba31a6042e08b3a45833c7bbaaad12140ae1129ad85a" name="libelf1-32bit" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp151.4.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="440b4c48adc8d984d6a119e0ea538d6e33826e96a84af943a22d6b03b3b02268" name="libevdocument3-4" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="c6b00b153c06e14a1f36c331ecb9fd6ca48d5359564b919a7599b60220d975c3" name="libevview3-3" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="06438df125894fc40ccb785dfd2148601ea020ecac53ac63498ade6b26ca4cc0" name="libexempi-devel" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="a1b2675685a235b5826942e566814b8ec90db7498469ddfc36de8c7877fecf92" name="libexempi-devel" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="e68b38c4a56c0c1747ba664a438710bd4d59df1c5f42e0158384ecc786c46d3c" name="libexempi3" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="c311058f5a9a646e5135f915ff44279f41e50902165baaddae2890753a06ad6d" name="libexempi3" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="1aa71784d71d30444573b7665a99278a244105654861aeb63993843fb8f908b3" name="libexempi3-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="a6f84bbcbf7c8bc6f4928ca86905a95e141d9aa7ced28cf66fdd23c8662e650c" name="libexpat-devel" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="82b8de4a5ef1a6935e35fd325ff29592ad9a91cdf38f86cb54a4c0e944c8dedb" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="729029a025d4467e450350a178686e70fa6a6b3a4a44bc00e722727586429fd2" name="libexpat-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="3e1dd09744738e08342cf2eae85a8399a915fee29751df9ac88bd5e5d1e26eab" name="libexpat1" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="44974108e69612eb445e80ff2c0f3cbe703b66fb86a01930c23d9c68b3f6896c" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="1dfddbe269b8ed2994a8e090b064559dfd5db3aaeac1a36416f8790215a9c56b" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="10dd5d550e7d18290309054d7be2393692ddd1ce81bc8ad4142b268b8e311836" name="libext2fs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="93f46bb815ef2cacd4362fe62680ea6695db3184dc839f0808148cfd776f3fef" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="febcba782bf2c99140d9cfc02f04efc4422d0580ba30012d2408043780f86659" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="39bdb4cda3d95919457e18440cc5d7bec5685657a341ebb9b183f0892b417e6d" name="libext2fs-devel-static" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="abbc59c6e3fb0000dd1bfb793a74af273d78c8cc87481b9155103d1f364c59d5" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="c35e425edc254aa7dc9f08398c9e068535cd14bce5e626dd5bce87d3d672f6e7" name="libext2fs2" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="b42a83ee6b8eab1d075ea80a6227fbe5c217d36697c130674b3f4958bb528be5" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="64302e7dc8d2dd6dd56c52a48e186835ab303e07ada8054bf1d4834f66fbda75" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp151.5.3.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="0f564563d7bc43d3f9f88ec8608af4c9572f272feaa8dbd0cc4deeb74efd3819" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="0ed085914acfb690b0fd4c916777f4f14650df4750ba63f06c123bff2d227a9e" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="e2b3879e1e790eccbdeaae67b2094c48370fbb0f43162a7c71eb13b1f2f8da74" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="a220e14ea3b5478259909a56d8e21b23906e9cd5b8ffc8d37085aba8cc318d06" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="f2b8a98f12374d3c8a8aac814760649748896fe3bae060e51a9afa6a562a9769" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="de30f83cffe9e5ae34e5bb36e8367d2dae8717d9dd3bb7a30e54de85958babb7" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="a278489624418c038dccad4614b2b5bb8c756522d85eb8840e094189a4523a46" name="libgadu" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="aj@suse.de" date="1178884800">- Remove duplicate post/postun sections.</changelog>
  <changelog author="crrodriguez@suse.de" date="1204977600">- update to version 1.8.0
  * using protocol Gadu-Gadu 7.x
  * direct connection fixes
  * minor fixes
- disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1219147200">- Updated to version 1.8.1:
  * fixed memory corruption in gg_dcc7_send_file()
  * fixes in sending cached data
  * endian fixes
  * documentation fixes</changelog>
  <changelog author="sbrabec@suse.cz" date="1225281600">- Updated to version 1.8.2:
  * fixes remote denial of service via contact description
    (CVE-2008-4776, bnc#439770)</changelog>
  <changelog author="sbrabec@suse.cz" date="1248696000">- Build with threads support (bnc#525312) and SSL support.</changelog>
  <changelog author="fisiu@opensuse.org" date="1274616000">- Update to version 1.9.0:
  + support for new version of gadu-gadu protocol (8 and 10)
  + images sending fixed
  + resolve name schema option
  + doc and test programs
- Add libgadu-mem-leak-fix.patch.</changelog>
  <changelog author="fisiu@opensuse.org" date="1286625600">- Update to version 1.9.1:
  + fixed memory leak in html messages
  + improved converting messages to html
  + status flag can be changed now
  + improved direct connection API
- Drop libgadu-mem-leak-fix.patch: fixed upstream.</changelog>
  <changelog author="fisiu@opensuse.org" date="1298030400">- Update to version 1.10.0:
  + ssl connections restored
  + typing notifications
  + multilogin support
  + buddies' info enhancement
  + support for additional xml events
  + initial file transfer over server
  + partial import of new-api branch
- Spec cleanup.</changelog>
  <changelog author="fisiu@opensuse.org" date="1300449600">- Update to version 1.10.1:
  + improved direct connections
  + improved connections over proxy server
  + some minor changes</changelog>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="fd4d6b5ed75ce48fdf3cb30c23c24eca65202da02d044f7430d2ded626ced455" name="libgadu-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="ca289a2e9e6e7bea94703e36b016abde6971df19ca02884b25aa11685c3dfa20" name="libgadu3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp151.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
  <changelog author="Mariusz Fik &lt;fisiu@opensuse.org&gt;" date="1558785600">- Build against zlib.</changelog>
</package>
<package pkgid="cd1580849120a8b3fd8d1fca00abb3fa2ebaf2410f872977f817887b3c7de508" name="libgd3" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="0df103a3d2becf2a5f6d23c215d018fb1ba1bb60ceebfedb71dfc8c3b6d0b93b" name="libgd3" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="ecd80eaed3a1c97e32b07c9132325ae7f0dcbc7502314862aaab9e97524eb56a" name="libgd3-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp151.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="5091f94ac21ccfee2e6a1ed6b2fe774028bf3743b74125b5b601197eb8cee0bb" name="libgdm1" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="e072f6b55a69f063fc5f1ef24310062fbd9b7aadbea2b69fce597ac90f9f5313" name="libglue-devel" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="84643b206895858300e0310451cf1b37078fc20c4fca6bf4634cb12ccb5840f9" name="libglue-devel" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="50e4c616c4943af98bcefa92c052e1b9930979f8b0bb2bd9e07bf60a9156f318" name="libglue-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="95bc5a4167989f897fe7ca61358dc47ecc36377d1bd44b1aa4a6bf220c3bb60e" name="libglue2" arch="i586">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="93d6c7c4b284037048b6639624edf9e892beae3143cde12498c55dc7176d08e6" name="libglue2" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="7b361710073c940a4a32f9245c6c529f68dcd50dcfe9391e991a7abbe31e1c9f" name="libglue2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp151.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="978b8d2f62fca871c1ae66a146c18d05b002d197c2a763c45e8b3aa8b46c5aae" name="libgnutls-dane-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="f520d01ce0170814db06df6dc5eeb772effd70920a05962f6329a4d7ef780f92" name="libgnutls-dane-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="1ded57297807e51066b990427f7fd3af614e834912b89c6035b431a547200a99" name="libgnutls-dane0" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b6f2e852b45c656e1f66f74c7231c0940c0e74f6cd1037d632ba840098ae9ea9" name="libgnutls-dane0" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c7ec8bf925d8fd5ea63c7bc2f5480899d28c60cd068cac5717f1d5a02031af74" name="libgnutls-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="000d111e0d4c45bd3caf2ba29bdb3a12aebafd06966390c8445c26031d9b7b77" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="0fc756a87395bbe27760beb58d860c6c6bb031ffe441a5aad5ec9fff04db1e11" name="libgnutls-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="106c5ee697ab85050704944ac961b973820609a16381823458c0289619dd8007" name="libgnutls30" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="1e6ded85311c18709d0a8a2c144dbdf96fac05f2783045e6d3e0271ee82732f9" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="61d3d080b0103d24978ce49488f66c659ea5da896e1ca4fef65de98044c7401a" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c97a063603006c05393c1e78a38cb8c57241ad7f8f502378c32d59539b400bda" name="libgnutlsxx-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="c02b208cabf5e3d0f514e5dc7572314a942e05e03ce1fdcba0b2ba9666995884" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="b03aa880936b1d046f75c9c56f89d51b65de5c0d299c7e993f2667ba356e6d11" name="libgnutlsxx28" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="e0a590287409bf5b83363422b8facd7f7a951338eec3971a41cf0738b644f39f" name="libgnutlsxx28" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="79c67fc860e3f838b419221b3f227ddf3d28c832ab298690731596aa223f92cc" name="libgpiod" arch="src">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="00461d4dbd4cbea56629aaf0f4c45c4fe6a3133c36a048de470cc439335d4ebf" name="libgpiod" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="b2d54c63e01281de6c40e0bda96525b76044d810c424012aa7634695f17d0098" name="libgpiod-devel" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="40a008df4b614ebfa02dd47d6fe9d9ec7451f4a3a47837a40d52167315ab96c3" name="libgpiod2" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="57272a61849200e99bc391c900405f9d7d1cf60e29baa4528182ad342d7e4767" name="libgpiodcxx1" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="b45058754e80a5e51c759ea6d1b975fba0cf1f35540941832f04169da5f10ffc" name="libgraphviz6" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="c36474444df2db6043e288880b80eb28887b5ab0a4a34c165b6f6874d25a4a0b" name="libgraphviz6" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp151.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="60d77d64a04f6a8c47b5448112ab5d18ccf2ebd64b56a6534da4ef31eb097fa9" name="libgroupsock8" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="60d317c0b9fc581d85f6dab739c53fdfe9a2381561377623bbb653be7fd0848d" name="libgtk-3-0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="92fc003ea570e45e129c7e2d68d92bdb944da68ddc33293d4b14014cda01cb64" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9363baeb48f6b19e7d226e0455dffbc71cf797d1d6080b3ae13c92accd3eb170" name="libgtk-3-0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ee30ce1fb702748cbc8bd011051e6db8bbc5913c7b075ac3c0df0878974c84d1" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="addaeef130044772f4a8987313b918305db0d737ee52b5370120663e2f16905b" name="libgtk-3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="42707dbf308bcb8f36e0ed2c5f5b118cb04f464573bc6982718b56ac54f1d935" name="libgtk-3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="f511e17050b1b22ff86d287262ff2e1ee9f377f40aec77e575719e5274155912" name="libguestfs" arch="src">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="dc821a72b05ad3d8408d40cbe32346625f2e12b6489eda0cd1e3e01a1cc91756" name="libguestfs-devel" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="9351591e895e8dfe5bdeaaa9fd017e4104baaa24888446cb96191f02d4ce30f5" name="libguestfs-test" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="eec321c618e023a86732feef421cb8a03a95b94b3b4b3e2230b070081d2bb291" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="739c414575b3a8fbc1b91e2002a1ff1f6cf58719d10eaeefffb392d211218880" name="libheimdal" arch="src">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="db685cfc91e53853b1d9c7fe9419c272ba8e481861990254819c75037ee4a098" name="libheimdal" arch="x86_64">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="d8bfe732eb9014139f6744fefbe9ca31dc2c787bccc8e2ee1af1ebcbef0165ab" name="libheimdal-devel" arch="x86_64">
  <version epoch="0" ver="7.7.0" rel="lp151.3.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1514548800">- Update to version 7.5.0
  - Security
  - Fix CVE-2017-17439, which is a remote denial of service
    vulnerability:
    In Heimdal 7.1 through 7.4, remote unauthenticated attackers
    are able to crash the KDC by sending a crafted UDP packet
    containing empty data fields for client name or realm.
  - Bug fixes
  - Handle long input lines when reloading database dumps.
  - In pre-forked mode (default on Unix), correctly clear the
    process ids of exited children, allowing new child processes
    to replace the old.
  - Fixed incorrect KDC response when no-cross realm TGT exists,
    allowing client requests to fail quickly rather than time
    out after trying to get a correct answer from each KDC.
- Fixed heimdal-patched.diff.
- Removed Avoid_NULL_structure_pointer_member_dereference.patch,
  fixed upstream.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533643200">- Add reproducible.patch to override build date (boo#1047218)
- Use constant hostname (boo#1084909)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1561291200">- Update to version 7.7.0
  + Bug fixes:
  - PKCS#11 hcrypto back-end:
    + initialize the p11_module_load function list
    + verify that not only is a mechanism present but that its
    mechanism info states that it offers the required
    encryption, decryption or digest services
  - krb5:
    + Starting with 7.6, Heimdal permitted requesting
    authenticated anonymous tickets. However, it did not
    verify that a KDC in fact returned an anonymous ticket
    when one was requested.
    + Cease setting the KDCOption reaquest_anonymous flag when
    issuing S4UProxy (constrained delegation) TGS requests.
    + when the Win2K PKINIT compatibility option is set, do not
    require krbtgt otherName to match when validating KDC
    certificate.
    + set PKINIT_BTMM flag per Apple implementation
    + use memset_s() instead of memset()
  - kdc:
    + When generating KRB5SignedPath in the AS, use the reply
    client name rather than the one from the request, so
    validation will work correctly in the TGS.
    + allow checksum of PA-FOR-USER to be HMAC_MD5. Even if TGT
    used an enctype with a different checksum. Per [MS-SFU]
    2.2.1 PA-FOR-USER the checksum is always HMAC_MD5, and
    that's what Windows and MIT clients send.
    In Heimdal both the client and kdc use instead the
    checksum of the TGT, and therefore work with each other
    but Windows and MIT clients fail against Heimdal KDC.
    Both Windows and MIT KDC would allow any keyed checksum
    to be used so Heimdal client work fine against it.
    Change Heimdal KDC to allow HMAC_MD5 even for non RC4
    based TGT in order to support per-spec clients.
    + use memset_s() instead of memset()
    + Detect Heimdal 1.0 through 7.6 clients that issue
    S4UProxy (constrained delegation) TGS Requests with the
    request anonymous flag set. These requests will be
    treated as S4UProxy requests and not anonymous requests.
  - HDB:
    + Set SQLite3 backend default page size to 8KB.
    + Add hdb_set_sync() method
  - kadmind:
    + disable HDB sync during database load avoiding
    unnecessary disk i/o.
  - ipropd:
    + disable HDB sync during receive_everything. Doing an
    fsync per-record when receiving the complete HDB is a
    performance disaster. Among other things, if the HDB is
    very large, then one slave receving a full HDB can cause
    other slaves to timeout and, if HDB write activity is
    high enough to cause iprop log truncation, then also need
    full syncs, which leads to a cycle of full syncs for all
    slaves until HDB write activity drops.
    Allowing the iprop log to be larger helps, but improving
    receive_everything() performance helps even more.
  - kinit:
    + Anonymous PKINIT tickets discard the realm information
    used to locate the issuing AS. Store the issuing realm in
    the credentials cache in order to locate a KDC which can
    renew them.
    + Do not leak the result of krb5_cc_get_config() when
    determining anonymous PKINIT start realm.
  - klist:
    + Show transited-policy-checked, ok-as-delegate and
    anonymous flags when listing credentials.
  - tests:
    + Regenerate certs so that they expire before the 2038
    armageddon so the test suite will pass on 32-bit
    operating systems until the underlying issues can be
    resolved.
  - Solaris:
    + Define _STDC_C11_BCI for memset_s prototype
  - build tooling:
    + Convert from python 2 to python 3
  - documentation:
    + rename verify-password to verify-password-quality
    + hprop default mode is encrypt
    + kadmind "all" permission does not include "get-keys"
    + verify-password-quality might not be stateless
- Version 7.6.0
  + Security (#555):
  - CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed
    checksum
    When the Heimdal KDC checks the checksum that is placed on
    the S4U2Self packet by the server to protect the requested
    principal against modification, it does not confirm that
    the checksum algorithm that protects the user name
    (principal) in the request is keyed. This allows a
    man-in-the-middle attacker who can intercept the request to
    the KDC to modify the packet by replacing the user name
    (principal) in the request with any desired user name
    (principal) that exists in the KDC and replace the checksum
    protecting that name with a CRC32 checksum (which requires
    no prior knowledge to compute).
    This would allow a S4U2Self ticket requested on behalf of
    user name (principal) user@EXAMPLE.COM to any service to be
    changed to a S4U2Self ticket with a user name (principal) of
    Administrator@EXAMPLE.COM. This ticket would then contain
    the PAC of the modified user name (principal).
  - CVE-2019-12098, client-only:
    RFC8062 Section 7 requires verification of the PA-PKINIT-KX
    key exchange when anonymous PKINIT is used. Failure to do
    so can permit an active attacker to become a
    man-in-the-middle.
  + Bug fixes:
  - Happy eyeballs: Don't wait for responses from
    known-unreachable KDCs.
  - kdc:
    + check return copy_Realm, copy_PrincipalName,
    copy_EncryptionKey
  - kinit:
    + cleanup temporary ccaches
    + see man page for "kinit --anonymous" command line syntax
    change
  - kdc:
    + Make anonymous AS-requests more RFC8062-compliant.
    Updated expired test certificates
  - Solaris:
    + PKCS#11 hcrypto backend broken since 7.0.1
    + Building with Sun Pro C
  + Features:
  - kuser: support authenticated anonymous AS-REQs in kinit
  - kdc: support for anonymous TGS-REQs
  - kgetcred support for anonymous service tickets
  - Support builds with OpenSSL 1.1.1
- fixed heimdal-patched.diff and reproducible.patch</changelog>
</package>
<package pkgid="649807d3aa77c4d966f029036d2346ff4896d173ab9664d07262372f702782bf" name="libibumad3" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="a3d6dcb29b97f106a6a18d6485b755c72bfd5f2c9a7cc84e2a2cf770de810e7f" name="libibumad3" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="65c45dcc87e07cff284d9f265d9799633793c0fd372cd3f13cff74f9f1c1c832" name="libibumad3-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="cc14125e11fe1f35dd482d0be6fddee6d5fa6d8acc04cde05be6eafcb93396b1" name="libibverbs" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="b43122901a0b2f419101621baeb7cdffe6e40f0336b62fbf691c1e59f8725710" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2852bc0003ad510e4f78e87c47044272622312001ee396029fe7656bdbbfc38d" name="libibverbs-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="a3efc98c9530fb2c7b7865e6f464640a8528b2759b230c796a977ea94eb57ca6" name="libibverbs-utils" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2f0a819252e9bfe3f447a9c892b0338935e6fbeec546db483ceb130edb45911e" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="fec9b02161f5c308e2fcca35ba7c2f32d96c7b61acc1051e740f459b366e13eb" name="libibverbs1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="de181cc6c8bab8e8c1cdcafdebeca2862352a2c29182fe6434b27ddc64553772" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="892b17f55c94b2a6d697d89cf42aa599e2722ef41d52f2e0e11904214d406f10" name="libibverbs1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="2b33a2a627d7a739a7202ba061f5ba256bbc69ae64fa609b05ffc16982b79c9f" name="libipa_hbac-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="5aa3f4dff228d1996451d8241f3c12a140603e2ab37caeb9df6eafb03d69dbf8" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="cf9fdcb657944a05db411e8509c04f58062bdd10e437f304a284e05558d11c13" name="libipa_hbac0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="f82dece5228c02679165b304b4766600571be044929b9f91997bc6f079d8120c" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="859370dbd2b4228095577a6f654ea8c9b8223e010c51b670f1097182a55a5fca" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="4ca90dd77ba66b1c36283355a4963712166e51e2b36759047bcdf210c1339666" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="9bba6b61a82d7ee0287685f65c6315f7f95a213731dcb1d9f098ff34f4779f2f" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="fbc8aa1156081d32f761e2d603d7bca9045774c411ab26df63dfcac5d82a709a" name="libirs160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="a9cdb8d058c8eb9aa339bf4cf4a7796280cb42c85699b0af3660f5745a3a2c9e" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d22918c6fff3c7b5ddc3c6cdfb9c09402a12223cbad66ecaa04234429e116e6d" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="a8b8babbe0f88ac089fda4b39d0c3f7ae27e62634fe89970404d06518eb2cdbb" name="libisc166" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="47c0a1e4751c45f494e081ca41d9357de84bdde59dc4f8a26d4a7c1682e8e10f" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="84c48a3e5eebae0cb9537f397fc4d07c45e0e2f1ccfb58b4ec49507d7e670296" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="c788b7b9542b7e5f2f3da32bb000e0846c0e1316ad22eb54a82c302d51342c10" name="libisccc160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="5115a2798131d00c4d936bae30558eec3b3b86d8fb94dff27681586f3f853687" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d8de9ad8d1155ba7117823b080664f0856ce72d273ce8a3e05031781467330be" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="7e74bb20ee3cfc033f86683a431076df55df577c081e58de862faf4ab8a135b8" name="libisccfg160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="486431d9cbdc5c7349e4bf215df8760bfd7f287b69dbda903a1c6108bd4fcfa2" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="20c0dec5c46a7d80c56f542c49c33d99b451467e35d67cda7c0d428b6a580c4a" name="libjavascriptcoregtk-4_0-18" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="1fa5090165f98c85f16283b5fecab458439eb0e331283a75dfdb6a6ac71de70b" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="ab268aab9f5e6c0cc11ab83f54720c6cea50768478e05fded894e8658a321d20" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="33d720c49dc1e7917a9d8816d5c59b59c848f5a72182dccf44f2b88cecd8281e" name="libliveMedia66" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="9f103959358f221253d8a03237ca383d32182b84f76cee6bae3b6df7437b4dcc" name="liblldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ec816679317bea6d330e9459ca33327c87198280f03923e431146bbf49b4b0fb" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="5f38c7bd1a52b0dacd035632963e60ae7c7d33535f9c621838f628e0307791cb" name="liblwres160" arch="i586">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="40845067f1c0ae52752951aab3563d32b351203a82ee91469ef0ee779a64cfdb" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="c784113cca4ea6e5a4e893217a1c71e43180c8e0653637322fa67698c7cd758c" name="liblzma5-32bit" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="eafc46b9299f8e42cee467961bc8a673395350690ac07129b1c40cfc355adffd" name="liblzma5" arch="i586">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="2971f511001408dbc6932a9ac29f052e95e3c72e75f66bce952ffc6ce8574bc6" name="liblzma5" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="b670415a0a049d04233f5eb2e05740a784daa3657ef03cda6a50b40baaf55dbf" name="libmatroska" arch="src">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="reddwarf@opensuse.org" date="1383393600">- Update to version 1.4.1
  * Added new elements/classes DiscardPadding, CodecDelay and
    SeekPreRoll
  * The licensing information has been cleared up/unified.
  * The Makefile now contain options for specifying the destination
    base directory during installation ("DESTDIR") and for
    specifying which library types to build ("link").
  * The libraries are built without the "-ansi" and
    "-fno-gnu-keywords" flags on Linux
  * Code cleanup
- Remove matroska-noansiflag.patch. Applied upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Add C++ visibility support by simply reusing the win32
  dll code for the same purpose.
- added patches:
  * matroska-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- Revert last change for now as it breaks mkvtoolnix which
  uses internal symbols :-(
  keep fvisibility-inlines-hidden though</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert fvisibility-inlines-hidden: still breaks mkvtoolnix
  on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1407326401">- Add libmatroska-heed-ldflags.diff so that make places LDFLAGS
  onto the command line for generating the .so file</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="b39535ecfa2d1375245f3a9f3bc3c7762576caba1a814fd3a2babdcc2cba795a" name="libmatroska-devel" arch="i586">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="8c84280b28f5c02b33cb53c900e68efe74e9ea9f422fe9354674a94d64a1c58c" name="libmatroska-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="00f142111ab4bceae80b8acc352439bd4f03d00dbfb7502a63b4e5f1a3bd7a98" name="libmatroska6" arch="i586">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="97dce0f39c1f794a807a46380f2c50344c86b46c0f7d82c412d85369376715c4" name="libmatroska6" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="d54f5eaa7bd0aac81a5bf61ef9a560f67f45032902b3a38eefeb4fefb2b89d81" name="libmatroska6-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="lp151.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.4.2
  * KaxBlock::ReadData(): fixed several instances of unchecked
  memory access leading to invalid memory access/segmentation faults
  with invalid or broken data inside block groups/simple blocks.
  * KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
  if with EBML lacing and exactly one frame in the lace.
- Drop libmatroska-heed-ldflags.diff (no longer needed)</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- package the changes file as its required for rebuilds</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.4.4 (security fix):
  * KaxInternalBlock::ReadData(): Fixed an invalid memory
  access. When reading a block group or a simple block that uses
  EBML lacing the frame sizes indicated in the lacing weren't
  checked against the available number of bytes. If the indicated
  frame size was bigger than the whole block's size the parser would
  read beyond the end of the buffer resulting in a heap information
  leak.
  * all: a couple of optimizations in the main library and a memory
  leak fix in the tests
  * build system: fix linking against libEBML
- Removed unneeded linker settings, not needed anymore in current
  mkvtoolnix version.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.4.5
  * Support for new FieldOrder element and for the new
    color-related elements.
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="jengelh@inai.de" date="1468584001">- Fix messed-up FAKE_BUILDTIME call</changelog>
  <changelog author="rpm@fthiessen.de" date="1469188800">- As the upstream does not track ABI changes we had to add some
  additional version tracking.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.4.7:
  * Setting the version number in the "KaxCodeVersion" variable
    correctly.
- Changes from version 1.4.6:
  * KaxSemantic: add new elements dealing with 360/VR content and
    for language descriptors based on IETF BPC 47.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507550400">- Update to version 1.4.8:
  * KaxBlockGroup, KaxSimpleBlock: fixed writing the block header
    if the track number is 128.</changelog>
  <changelog author="rpm@fthiessen.de" date="1520683200">- Track ABI Change, since 1.4.7 is incompatible with lower versions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to version 1.4.9:
  * Switched to cmake.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Fixed ABI tracking with cmake macro.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1555416000">- Update to 1.5.0:
  * Compatibilty with libEBML 1.3.7</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562760000">- Update to version 1.5.2:
  * Fix boo#1141027
  * KaxBlock: fixed a potential access to invalid memory due to
    invalid lace sizes read from invalid data.
  * KaxBlock: fixed a potential null pointer dereference triggerable
    by reading invalid data.</changelog>
</package>
<package pkgid="5fcb9af74d14232e7736884a32e1cfa5d68b5c49ab6bfde4824401fa05bdc368" name="libmlx4-1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="1fb39ab37707f1364355bf8f21efe222fe53301bcd37722bdea571a29920b221" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8b5aa397a679dedfa997687b40aa95eef5a4972a2de14aa64ab3c2f83b2508b0" name="libmlx4-1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8b20eeeacf971721d76e542c266d6e0f67811169fe010d746aee21200d504d69" name="libmlx5-1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="110cf10e3f2a4971f56b264943ac546954dd899e292fc954fcad5dcd89d56c41" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="08cfdad225367e6a49d7fac65be3ee30c8c9f7a080a0614f95f6a3fedbf76d3f" name="libmlx5-1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="1068f59774caa8d4e10f85068133ae211227e760e25be8ae73f86461a7757e89" name="libmutter-1-0" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="cd1f07604511a737f59bab95f61fc396ff079668d350bfab256da5446ec09fba" name="libndr-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0689c6086187030e993cf08617fa6276efa63e37ce5a97bf6d56b68b44a05b1a" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f50bb6e3e1941d0285c12fd4e619cbb77cb21b7fb79f8da2490d0ece240d6f6c" name="libndr-krb5pac-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e506ac3327ee27d997e21fdd912be4938f7bf52068830ea77280fd75ad09925b" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3167837fcdf43bcd0927be5d29198d1949f855693b6ee62dfab79773e12bdd14" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b1e8200793bcb7972bfa00eec622682659d08351e17c0c906d198a7031efbac7" name="libndr-krb5pac0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="120adf8b01f73474d6ad219073f3183917b6ff6690f4e5e75542293668dcce0c" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="cc10b7d921782b98e2a0afee0de4817b54f05ad04545d15e5913502b442e2cd3" name="libndr-nbt-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="422441c8aa466ce5bfc10146495301cfb6663a906435a6e62317573f860ef758" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c6f5b3a6b9f69d3178f7f57426f589f7318397b90301dce234b230102d16bab5" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b639590e475257cd5345b0b2d89050456abc0219ce46572cb9915195972d15e0" name="libndr-nbt0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b0a568080f18efcbaf535fb6f573867d17e79d3e7fe45ae6f7e38143e8b19569" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4750df943fdc85468e5630765823ef233755955037a2b41298fdb27d81cb1fee" name="libndr-standard-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2ab187210221dc251f102517ce499e9929701e6e5a563f6e8104515cf72a3aac" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="49d8f3df528f703bd2d1b28be624d15ab56227d7f6e8baf23115c123fda0be03" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7b115556128a21578298a4848dd1333add04231d5e5efd0cbdd18090964bfa58" name="libndr-standard0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="13949b13ca5f6b36b77494c4378337c6e485ee67bd7f75ff34454e9781d14f0d" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e23660bd9f2efbbbe5b622dd14d8a6ae4c2ec200b2212b0227aeb63e195d9c7d" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2a609d4cbf60c898421f3647d6daf151047ef167b5591352c1bcda0cd5934b8a" name="libndr0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="5903de2f975d4ae41eee7c5efa206bdcf36a0c442f47011b544eb386fbe26381" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="9818da46f2d076bbaaa2f5704adbb743993debca80cbccd3923b0c4dfa0d9c59" name="libnetapi-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="da07e504eb332a40ad392bedc18c3db0e1d4e5e47bf15016d2c8bdfe7ae20434" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7deb5f11a1f3b863c4c542e3c44ea243d129e93911b28bf5dbeec70940c66307" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0abdf2a765eb6cd5769abda1e4f45fae1b6ce53673a93b43a3cc780355ec80a9" name="libnetapi0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="e390da55d1f74758947f8363ff40ec7aee5bc0a09a0505ac421f713900a55f3a" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="21fee5a5f1622904b414cb23103646950afcbf773ea267724cdd71400f3bbbe0" name="libnetpbm-devel" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="a4aae0108bb1d58ef4ccf30443c2207445be039946bd378af19bfd29af20bc20" name="libnetpbm-devel" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="544bd44cb9acd5b405a4642a982b52882fa034cb41618bcffa2737703508b1dc" name="libnetpbm11" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="4b92f72a733740b35e2158e3b5468964885f8b5f244c79a5b9f8e91f240192da" name="libnetpbm11" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="5c8b6679e9abe24ee2916d072f7ff565b391bb4b0a6b0c1554dc288f84a1dc14" name="libnetpbm11-32bit" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="79b1ec8956977996175bb9fc128758f668a00a552549245e8443af661ff1d359" name="libnfsidmap-sss" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="6253a90e6f5a07a34db36f563722d0b423074cdbeb767797ac2c141ebd5fc8c8" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="a93b24f6675f1781b39f05a68ab7943d8f5eb16e641cfb439cef683ea807f5d3" name="libomp7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="d1c46367d162d95b9d1151fa47c8c21d7f4e785177d74aa4290c66add39371e3" name="libomp7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="107fbaddc2ad93d5390bce98ab16a60812af8cc550e067f1653865becd6f4018" name="libopenssl-1_0_0-devel" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="ed2d44c5039af71dae0eeb57cece3116db2ce8f25069e70bec8792faba8b95e5" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="4a747d2e253f088af50ed77bc74fdd8c171de53bd82e1156d863739e0db4c00b" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="70a61e8bf39116ef78e019a3024e5291a93c45401789171b8f53044438ea8a8f" name="libopenssl1_0_0" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="d7c20fd01e3cdc0d0d1693af5307ea1600de302dd598b637a9cc88f587afe675" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="57867b3fdbc71c259e0d4dee04d853d03192d176e16d8f627c5134e95ac0f015" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="07576a4cadac48f7de96a39af74b6fb4d71321f2376a50ca29f940e6e400a121" name="libopenssl1_0_0-hmac" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="f19816d8f1efc2d0bb1b8c9eed4dce15cd43e974bbb58b9152da70501be4039f" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="68976eb1093f4bfbae002e07d313fb037b026d104a249f5f9420c0c1f1305ee8" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="8b0441b9f684239c9cd820efad441787803f8e1e2317bcd4a7beadc845779012" name="libpackagekit-glib2-18" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="8da5f18c84321d4e28af524b27f204ebea07cb328649b9deeb8273a544170ab9" name="libpackagekit-glib2-18" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="9aa7e8de2f2d9fe144c3f413727ace8d5e23b8d86f3c2cf2e9ebb28f5c674c7e" name="libpackagekit-glib2-18-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="13e81946c32f7aedfda2b9606223c3914370bdc620b665fce543d4ffcaaa5c84" name="libpackagekit-glib2-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="a7d6949a2a5a8751a9937811fad3ec37d48bdfd215cf65a33bd24feb1e6a099c" name="libpackagekit-glib2-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="5e311a7398f5c4259e770a6760051c62298aa37ebd5f9dc620db02c926008484" name="libpackagekit-glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="83ac16d975eb717f4c3963cc4ccb187ddc7064c89e3304fafbe4fff001d6785b" name="libply-boot-client4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="c99ca11d9c7b45c4fea5b3135c75a21e8ca3af531e22b9185e6a360936761daa" name="libply-boot-client4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="b3dd3c76c21d7d4af8db13bfe35f1fc46bccc02de2f5b333aa639c27d7d69f13" name="libply-splash-core4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="51a5b433272ee22c3fec2af1dbb2937ff85b19e8b1c5893888503579736d36f2" name="libply-splash-core4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="651b5e0855f571279ce2fa481ac8d9c2cbe1d297f1fdebd6f37bafd72ac3c40f" name="libply-splash-graphics4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="4696f2e31fb0f2d153c341c07bce5397d9c5288cfc2b7724d63fe962755949c7" name="libply-splash-graphics4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="e515a88f9df4d843920539b542cde9ab1482944e92f90646e63e798dd857929f" name="libply4" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="fabdedc173befec0dff66937b38ec66e65e342928a7a5fad766ebf44a85b3c2a" name="libply4" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="1cca0f6357073b0069b9e31d4ce421d09753faea42cf0012fef34babec1b7a0d" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="7b4f9235836bc9061b9eb081250fe65c5c5cae37de3f8c0dc2fa27d4167f3add" name="libpng16-16" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="49b1d5eb204333b590661130900b9849400fd7f9dcedfaed29075d5cb81652de" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="854209239a8ae226c0a5ffa4ee161b321c7a4455dd73a800ab96641b952d9eeb" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="f4cff9ad285ac3b8a7ad05619d21491e483f37040049710802547b0f5c099409" name="libpng16-compat-devel" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="3280a465aee11d35d413e1c6f04e74a5d1ca455e79b384f1402f1049c808482c" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="e4dbbabb7d58a302047d92b4f7fd10b25f56cfd0c8677f451dbd1f962dea77fc" name="libpng16-compat-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="63a473c43a83491b0de9727c1cc921c53694491d4bd724a937e7fce2cb36c9ac" name="libpng16-devel" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="61c3d3804e866bb838da548907101be20ba8522c40775bf4d5ea0d389b807ba7" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="b9c0b395af437b4f327503eec391ca43ff77857ed5900bcadb01a32e5753634b" name="libpng16-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="445334350cfba050300f370f69b7da46c5383a46f0e5bd69e1762faa772ad3e2" name="libpng16-tools" arch="i586">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="c8d396dd6e6dceca82369df79b9b052763de62b96b1b30a1790cc4e658254411" name="libpng16-tools" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="lp151.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1464264000">- update to 1.6.22:
  Added a png_image_write_to_memory() API and a number of assist macros
    to allow an application that uses the simplified API write to bypass
    stdio and write directly to memory.
  Relaxed limit checks on gamma values in pngrtran.c. As suggested in
    the comments gamma values outside the range currently permitted
    by png_set_alpha_mode are useful for HDR data encoding.  These values
    are already permitted by png_set_gamma so it is reasonable caution to
    extend the png_set_alpha_mode range as HDR imaging systems are starting
    to emerge.
  Restored "&amp; 0xff" in png_save_uint_16() and png_save_uint_32() that
    were accidentally removed from libpng-1.6.17.
  Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
    (Robert C. Seacord).
  Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
  SSE filter speed improvements for bpp=3:
    memcpy-free implementations of load3() / store3().
  Added PNG_FAST_FILTERS macro (defined as
    PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).</changelog>
  <changelog author="rpm@fthiessen.de" date="1470225600">- Update to new upstream release 1.6.23
  * Fixes a potential memleak in png_set_tRNS.
  * Fixed the progressive reader to handle empty first IDAT
    chunk properly.
  * Added tests in pngvalid.c to check zero-length IDAT chunks
    in various positions.
  * Fixed the sequential reader to handle these more robustly.
  * Corrected progressive read input buffer in pngvalid.c.
  * Moved sse2 prototype from pngpriv.h to
    contrib/intel/intel_sse.patch.
  * Fixed undefined behavior in png_push_save_buffer().
    Do not call memcpy() with a null source, even if count is zero.
  * Fixed bad link to RFC2083 in png.5.</changelog>
  <changelog author="pgajdos@suse.com" date="1470312000">- update to 1.6.24:
  Avoid potential overflow of the PNG_IMAGE_SIZE macro.
  Correct filter heuristic overflow handling.
  Use a more efficient absolute value calculation on SSE2.
  Added pngcp.
  etc. see ANNOUNCE</changelog>
  <changelog author="pgajdos@suse.com" date="1472731200">- update to 1.6.25:
  Reject oversized iCCP profile immediately.
  Conditionally compile png_inflate().
  Don't install pngcp; it conflicts with pngcp in the pngtools package.
  Added MIPS support (Mandar Sahastrabuddhe &lt;</changelog>
  <changelog author="pgajdos@suse.com" date="1476964800">- update to 1.6.26:
  Fixed handling zero length IDAT in pngfix (bug report by Agostino Sarubbo,
    bugfix by John Bowler).
  Do not issue a png_error() on read in png_set_pCAL() because
    png_handle_pCAL has allocated memory that libpng needs to free.
  Issue a png_benign_error instead of a png_error on ADLER32 mismatch
    while decoding compressed data chunks.
  Changed PNG_ZLIB_VERNUM to ZLIB_VERNUM in pngpriv.h, pngstruct.h, and
    pngrutil.c.
  If CRC handling of critical chunks has been set to PNG_CRC_QUIET_USE,
    ignore the ADLER32 checksum in the IDAT chunk as well as the chunk CRCs.
  Issue png_benign_error() on ADLER32 checksum mismatch instead of
    png_error().
  Updated the documentation about CRC and ADLER32 handling.
  Fixed offsets in contrib/intel/intel_sse.patch
  Changed integer constant 4294967294 to unsigned 4294967294U in pngconf.h
    to avoid a signed/unsigned compare in the preprocessor.
  Use zlib-1.2.8.1 inflateValidate() instead of inflateReset2() to
    optionally avoid ADLER32 evaluation.</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- update to 1.6.27: fixes CVE-2016-10087</changelog>
  <changelog author="pgajdos@suse.com" date="1483704000">- update to 1.6.28: fix build issues</changelog>
  <changelog author="pgajdos@suse.com" date="1489665600">- update to 1.6.29:
  Moved SSE2 optimization code into the main libpng source directory.
    Configure libpng with "configure --enable-intel-sse" or compile
    libpng with "-DPNG_INTEL_SSE" in CPPFLAGS to enable it.
  Added code for PowerPC VSX optimisation (Vadim Barkov).
  Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).</changelog>
  <changelog author="pgajdos@suse.com" date="1498824000">- update to 1.6.30:
  Revised documentation of png_get_error_ptr() in the libpng manual.
  Document need to check for integer overflow when allocating a pixel
    buffer for multiple rows in contrib/gregbook, contrib/pngminus,
    example.c, and in the manual (suggested by Jaeseung Choi). This
    is similar to the bug reported against pngquant in CVE-2016-5735.
  Check for integer overflow in contrib/visupng and contrib/tools/genpng.
  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.
  Avoid writing an empty IDAT when the last IDAT exactly fills the
    compression buffer (bug report by Brian Baird).  This bug was
    introduced in libpng-1.6.0.
  Add a reference to the libpng.download site in README.</changelog>
  <changelog author="schwab@suse.de" date="1499688000">- png-version-info-only.patch: fix missing PNG_VERSION_INFO_ONLY check</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="f0340398e40d7c22eae355becd15b9ffe1649faa0e82139c00201ce75042a4c5" name="libpq5" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="a229aa8d401e62a60323a3c5771847a13b5ce5c2851abb2de077ddbeae501970" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="bad0f1c3cd6fb641ead8cbf787cd9d450bb678c5025e4a812bf7005b506535de" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="fe61dea2e1ec81592a803940af5761e46cc4dbfec18ecba1097b07d2405abc93" name="libqb" arch="src">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="30a24b62be596d56afbd1c127eee791e547cd0a822d76ae5d447d8ad6367e74d" name="libqb-devel" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="499f2374055205a71b9249c334c97942616ec44aa68e67dc9b5d2eac20c2dda3" name="libqb-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="94602698f1ecfcd0c74bf2fd4a8a15a973fccda4477ac280978af386f33702dc" name="libqb-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="c8e0589e45418573b8fbdcace1ff885e29deec286e3fde06b893366ce3e5e79a" name="libqb-tests" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="32d9b5a1a55912055c0db1ca06b6f4fba163197b73e844e692797c6d09837f0a" name="libqb-tests" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="c023c9abc08f580fa5745f1215435e08f8082252297145e47184b34b8802d726" name="libqb-tools" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="73c908f34aa4af6674a7b43c7a016fcae0f16bcccc8765961d8e4bef4e46169a" name="libqb-tools" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="fafae34e72a2f809af26ce781fe8984a2ae9df36a2fa593a594944f2a902b79f" name="libqb20" arch="i586">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="552592266e156b64aa029501e48dc3847aa6d56f259f22d03b3f3da5088e5328" name="libqb20" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="3e468c3583f53e19350f4855da8ece9eec05dff9a3e375716528c5c3200374b2" name="libqb20-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3+20190326.a521604" rel="lp151.2.3.1"/>
  <changelog author="ygao@suse.com" date="1459512000">- Update to version 1.0.0
- build: update library soname to 0.18.0
- build: enable syslog tests when configuring in spec
- log: allow changing the identifier for syslog (+tests)
- ipc: return -errno when getsockopt/setsockopt fail
- ipc: set socket buffer size used by ipcs service
- ipc: set socket receive buffer
- includes: format __attribute__ func. annotations in qblog.h
- spec cleanup: get rid of redundant %clean section
- ipc: set gid on unix sockets
- lib: store server peer credentials in qb_ipcc_connection
- lib: create mmap files in socket directory
- includes: Fix format string
- ipc: Prevent fd and memory leaks in handle_new_connection() (bsc#947341)
  * Drop bug-947341_libqb-ipc-fd-memory-leaks.patch which has been merged upstream
- Upstream version cs: 6fc24f855bfc8dadb4c84bf823b225680670b1c3 (v1.0)</changelog>
  <changelog author="ygao@suse.com" date="1460721600">- further avoid magic in qblog.h by using named constants
- defs: add wrappers over preprocessor operators
- Upstream version cs: 6f2b3e85d0315288ee76869b99369e2b1f2f1b71</changelog>
  <changelog author="ygao@suse.com" date="1487592000">- version: Update version for 1.0.1 release
- rb: use new qb_rb_close_helper able to resort to file truncating (bsc#1026176)
- rb: make it more robust against trivial IPC API misuses (bsc#1026176)
- log_thread: logt_wthread_lock is vital for logging thread (bsc#1026176)
- log: Don't overwrite valid tags (bsc#1026176)
- ipc_shm: fix superfluous NULL check
- log: Add missing z,j, &amp; t types to the logger (bsc#1026176)
- log: check for appropriate space when serializing a char (bsc#1026176)
- Upstream version cs: 0a329683a76bc6aeb36f20f2bf6b43ba0440c4dc (v1.0.1)</changelog>
  <changelog author="ygao@suse.com" date="1487592001">- [ringbuffer] Return error from peek if RB is corrupted. (bsc#1026176)
- build: drop allegedly no longer intrusive syslog-tests opt-in switch
- Upstream version cs: afdff97f1af8e1be916816ad8b6d5530fa7c6637</changelog>
  <changelog author="jengelh@inai.de" date="1487764800">- RPM group fix; use find -delete over rm.</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- loop: Fix splint error
- loop: Also set signals changed in qb_loop_signal_mod() back to SIG_DFL (bsc#1026176)
- loop: don't override external signal handlers (bsc#1026176)
- Upstream version cs: 59eacf07dd92af6917ed351c0c5e51ec5237965c</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Update to version 1.0.2
- Memleak fixes (#194)
- Allow Linux to use filesystem sockets (#248) (fate#323415)
- Upstream version cs: 608de6d59a3de0eef0fbcbd8f284acbc018daa9a (v1.0.2)</changelog>
  <changelog author="ygao@suse.com" date="1500638401">- loop: don't bring runtime down for a trivial API misuse
- Upstream version cs: ef4c3a15ea3d3c5d5f9364269cd02d78a308957b</changelog>
  <changelog author="ygao@suse.com" date="1513252800">- fix internal object symbol's leak &amp; expose run-time lib version (bsc#1074327)
- bare fix for libqb logging not working with ld.bfd/binutils 2.29+ (bsc#1074327)
- add extra run-time (client, libqb) checks that logging will work (bsc#1074327)
- tests: add a script to generate callsite-heavy logging client... (bsc#1074327)
- tests: new sort of tests dubbed "functional", cover linker vs. logging (bsc#1074327)
- configure: check section boundary symbols present in the test (bsc#1074327)
- qblog.h: better explanation + behaviour of QB_LOG_INIT_DATA (bsc#1074327)
- log: use fdatasync instead of fsync where possible (#263)
- Upstream version cs: c011b12fcaf093f0463901154c475905f51d783a</changelog>
  <changelog author="ygao@suse.com" date="1513944000">- Update to version 1.0.3
- warnings cleanup: fix initialiser warning
- warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate
- warnings cleanup: Wsign-compare: log_format: int32_t -&gt; size_t
- warnings cleanup: Wsign-compare: hdb: uint32_t &lt;-&gt; int32_t
- warnings cleanup: Wsign-compare: array: int32_t -&gt; size_t
- warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables
- warnings cleanup: Wshift-overflow: trigger arithmetic conv. to unsigned
- Upstream version cs: 28dff090c74b6ba8609c4797294a5afe3fe73987 (v1.0.3)</changelog>
  <changelog author="ygao@suse.com" date="1514894400">- Update to version 1.0.3+20171226.6d62b64:
- build: fix configure script neglecting, re-enable out-of-tree builds</changelog>
  <changelog author="ygao@suse.com" date="1538395200">- Update to version 1.0.3+20180927.633f262:
- logging: Remove linker 'magic' and just use statics for logging callsites (#322) (bsc#1074327, bsc#1098449)
- log: Use RTLD_NOOPEN when checking symbols (#310)
- low customisable log line length (#292)
- ipc_shm: Don't truncate SHM files of an active server (#307)</changelog>
  <changelog author="ygao@suse.com" date="1542024000">- Update to version 1.0.3+20181112.926e851:
- log: Remove more dead code from linker callsites (#331) (bsc#1074327, bsc#1098449)
- Add the option of hi-res (millisecond) timestamps (#329)
- log: Add configure-time option to use systemd journal instead of syslog (#327)
- log: Add option to re-open a log file (#326)
- skiplist: fix use-after-free in the skiplist traversal</changelog>
  <changelog author="ygao@suse.com" date="1548331200">- Update to version 1.0.3+20190115.c880fcf:
- Add Pthreads (and possibly other) flags to the pkg-config file (#332)
- skiplist: Fix previous skiplist fix</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548763200">- Trim filler wording from descriptions. Remove unnecesary
  pkgconfig Requires (automatically discovered).
- Split non-library parts of libqb20 into libqb-tools.</changelog>
  <changelog author="ygao@suse.com" date="1548763201">- spec: libqb20 provides libqb-%{version}-%{release}
- spec: add missing COPYING in libqb20 package</changelog>
  <changelog author="ygao@suse.com" date="1549540800">- spec: libqb-tools conflicts with libqb0 &lt;= 1.0.3</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1554206400">- Update to version 1.0.3+20190326.a521604:
- enable building / shipping of libqb-tests.rpm (bsc#1131328)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554206401">- Drop manual requires from libqb-tests.
- Let libqb-devel depend on the exact package, libqb20 not just
  a virtual libqb provide.
- Drop redundant %if..%endif guards that do not affect the build.</changelog>
  <changelog author="Yan Gao &lt;ygao@suse.com&gt;" date="1560945600">- ipc: fixes (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0002-ipc-fixes.patch
- ipc: use O_EXCL on SHM files, and randomize the names (CVE-2019-12779, bsc#1137835)
  * bsc#1137835-0001-ipc-use-O_EXCL-on-SHM-files-and-randomize-the-names.patch</changelog>
</package>
<package pkgid="4b5be0137b4ce8a16fa2f4c884024fb4ac3c3870e1471385cbcd3055f45118be" name="librdmacm-utils" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="56a6186396075c9c5f7a7899e5ca328fc917ca466bee9e162fbec1d40dc3771a" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="6417ddeb497a617213a8d563ef490cf8ac2ece944bb07f299b9988923f8fdffc" name="librdmacm1" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="cb77b6399efee404ea5ed1db5e19eb650870f97a2361af5fa47ba6dabdac10e1" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8a1ee02ec05564e6be70caa670a541e0918e3d205d29ae342f80a32166235bd7" name="librdmacm1-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="508d0c88f68609fef71836c8403d60cdbbec3159d1955ea9b07460352b2eb493" name="libruby2_5-2_5" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="86088ec4340bcc9086b5b9dcac514af1d11ba7739c22d397b12f3305699ffa5b" name="libsamba-credentials-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="72a0da70854bd43dfa2b5f8746a68797a0ca0aadeab16e3a04ff77b47931662a" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="a6f558055e5721004de9795d7fd2832af93a8e5949a8d7b26ee51343f27810aa" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6b12241a23459a8a8931067f9b5a0c167a96d9ac30215dfbc3dc33edf0baebec" name="libsamba-credentials0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="eda5a9571158737bbfc5b9b700320297c06aba4b49287ef3353c663041ac484a" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="94af170f5c50750e950d9b58ac7858fd1b4b029b4a6955bd3aa338304e964ba2" name="libsamba-errors-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6329f64de08617d1fefad9ecba37c0d282756ea4dcacc7fde922c1c7fcf5e877" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4f74c9ed7cb838658aa05bc1efa92430611c32a256293e0cd9384c7b51ca0b5b" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8479c312892008d9eb19d85c9a47ee4bb8e31a67c4e8f04b0aa495b57228ecbc" name="libsamba-errors0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8952cffa665dc93c22ad4132e8bd1e6bc71e722221c19bc75618269e82dfe41b" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="eaf4b13320f818f6fe8c3fd5aae2e57cfafbaf3e42b7178de501587a12084618" name="libsamba-hostconfig-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7e06b490535575daa1af0df7539cbf2c516643d057e3378be22dc982bc134182" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="cd58e8e528c3ab9663505e4ce989d14c0cb852d5feac0f35110123a326f287fd" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ee162598de12f1c607920b4eaa1c3bc9391b298971c14197c205b0f96b9ada75" name="libsamba-hostconfig0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="60e84b6e6140d30367c5c98d42853af5f1cccee32795da96edfb237397329837" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8a9e24e041a78fdd8db3e9191be01028fab2e7fb4fa38932bef129d9af288324" name="libsamba-passdb-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7162ff97b53e4d5133a74030b45224d9f9eed5eef8511d462aa35ab3f3b35083" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8d035d40752407f3e5b11abfcb265154a7c4c579274603565d021ed1b739dd04" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="69c4bfa3bdf0b980ade3dad93c983cbc58886000ed6be47b2d113e545d2a2987" name="libsamba-passdb0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="43e662ae499736faf551d8ec35919c6f65a48fa240e83fb6482c5047afc4d2dc" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="550ed33fba745c7bc619e7e250058b1ef7382bbd337e7acb7fd016c871471ad8" name="libsamba-policy-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="cfff3538943fdb46df24d76b21176276d6e1562c294801687a5221278f756289" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="9854de86d77da77cc8d756823a1529d64e441be3742dec880c145e8e67c62249" name="libsamba-policy-python-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="1f2912bc69280735635d6e3911508f1eef134698ef8c5a1c8183b462502642d7" name="libsamba-policy-python-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c0f7abf6714cc6468cd61e8b89aec117f382df0a1799fc42d9b2ef752916cc73" name="libsamba-policy-python3-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="441725c81785612f2365d882cc4bd00b209e3d261d98adebf812cff61f7f1f2c" name="libsamba-policy-python3-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="99a7dcef27ebe26fd62a5a2ce843617306a7407bb9b21b27c0caee4ec9d4aa8e" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="508ab6062289a7a68aec246bae5ce810a8c857d45fb1b364ce9e0ecb9b9e4979" name="libsamba-policy0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="43f43f5fbbd55824eb8a28faad5352a067315b6b46e56a9a29fbe3eb99b5bfcb" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2f6429d27541cbb0b7769ebcf688618a4a71173ca3a90dcd8b0acabe22017893" name="libsamba-policy0-python3-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="d43aa264051a7221888a04ec765e46d76e7072e4b3bf32f5104f6cf183ff24c3" name="libsamba-policy0-python3" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="838431b0c094c466d8d1caacc08870f6779007ddd2fc716f2a281ab3b39ead08" name="libsamba-policy0-python3" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="93dcc9cdb1cc4d05f8ea6f7b127f46729ace52dddcfebd872e29a08259049249" name="libsamba-util-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="79186551367419ef9e43d95b55c5a0484bf819293828f81a87b087ecdcaf1184" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="92435171ef189f40bbea27fba7a91d1bd2979e469fe2f39f606106c2c76cfced" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0c1d9736fc7e2a408d555c39579b8f3d3ff6bc3d4cfb32b321f6298f6fbd0a85" name="libsamba-util0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="a21be3166dd342cd88761a60902d62e7924166127cd89eed0dbd6dc3a2d4934d" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="033a10fe570ca9929452e2bc3cf747e05c3c0e078e1b54de150dd84c550a0496" name="libsamdb-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ea285deae1d7c921566917cc850d52e6dc46da7f82e429665febd86c608b6e41" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="89bb75331ea12a1de7c8c95ed6c244da9a67a55da964bdb60279770fcd1d5e77" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7fbee6d27aacdfb0db7469fc3fd9c460ce5d8d52b9bd1cad8164f61d0be9c7bd" name="libsamdb0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="457c554f23dbb8852f3f4344f3f81277489c78a0108c6f18076138a6dd08830f" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="8e3fcb5aa9b35f32f866f7f9c8065f8fdc09cbcecfcb952631f4b87e1b2d2b85" name="libsass" arch="src">
  <version epoch="0" ver="3.6.1" rel="lp151.3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
  <changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
  <changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
  <changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
  <changelog author="ronisbr@gmail.com" date="1479902400">- Run spec-cleaner.
- Remove unecessary `BuildRoot` in .spec.
- Remove two non-breaking spaces in .spec that were leading to
  a rpmlint warning.
- Version bump to 3.3.6.
  Upstream changelog:
  Version 3.3.6
  - ------------
  * Feature
  - Expose the Sass language version via the C API
    (@chriseppstein, #2021)
  * Fixes
  - Incorrectly erring on comments in at-rules (@mgreter, #1233)
  - Incorrectly dropping internal state of AST nodes (@mgreter,
    [#1661])
  - Incorrectly parsing the calc function (@mgreter, #1706)
  - Segfault during error handling (@mgreter, #2016)
  - Incorrectly identifying the selectors with type-of (@mgreter,
    [#2020])
  - Incorrectly erring on ID selectors starting with a number
    (@mgreter, @2023)
  - Producing incorrect output when compile with MSVC (@mgreter,
    [#2039])
  - Various segfaults and incorrect output from @extend
    (@mgreter, #2017 #2031)
  Version 3.3.5
  - ------------
  * Expose our memory allocator
    This feature has taken many proposed forms over the last 4
    months. After much patent and considered discussion by @am11
    @mgreter @saper and @xoofx you can now access our memory
    allocator on the C-API.
    void* sass_alloc_memory(size_t size)
    char* sass_copy_c_string(const char* str)
    void sass_free_memory(void* ptr)
  * Features
  - Re-add sass_option_push_include_path and
    sass_option_push_plugin_path (@xoofx, #1974)
  * Build
  - Enable address sanitizer for clang (@mgreter, #2003)
  - MSVC assert too strict (@mgreter, #1985)
  - Update Sass spec (@xzyfer, 1967)
  * Fixes
  - Incorrectly erring on @extend and @media (@mgreter, #2009
    [#2007], #1927, #1923)
  - Incorrectly erring on @extend and interpolated selectors
    (@mgreter, #2000)
  - Builds not failing when Sass spec fails to load (@saper,
    [#1997])
  - Incorrectly erring on Sass comments in selectors (@mgreter,
    [#1996])
  - Incorrectly erring on @extend and interpolated selectors with
    the !optional flag (@mgreter, #1993)
  - Incorrectly treating 0 and false as the same value when used
    as map keys (@mgreter, #1991)
  - Incorrectly erring on escaped and unicode selectors
    (@mgreter, #1977)
  - Incorrectly rendering @extend and @supports (@mgreter, #1971)
  - Incorrectly erring on functions beginning with calc
    (@mgreter, #1969)
  - Incorrectly quoting interpolated strings in selectors
    (@mgreter, #1947)
  - Incorrectly escaped escaped strings in selectors (@mgreter,
    [#1945])
  - Incorrectly duplicating executing of function in interpolated
    string (@mgreter, #1944)
  - Prevent parsing url() resulting in an endless loop (@mgreter,
    [#1931])
  - Compilation error with using -DDEBUG flag (@tony, #1917)
  - Incorrectly removing @media blocks that contain only CSS
    comments (@mgreter, #1889)
  - Better handling of / in function arguments (@mgreter, #1417)
  Version 3.3.4
  - ------------
  * Fixes
  - Inconsistent error message produced when nesting functions
    and mixins (@xzyfer, #1941)
  - Ensure custom importers are executed for all @imports
    (@xzyfer, #1935)
  - Ensure custom importers are executed in the correct order
    (@xzyfer, #1921)
  - Possible segfault when generating sourcemaps (@usta, #1920)
  - Memory leak (@usta, #1919)
  - Unused variable warning (@xzyfer, #1918)
  - Segfaulting when @extending an undefined selector (@mgreter,
    [#1916])
  - Incorrectly erring when @extending inside a mixin (@xzyfer,
    [#1915])
  - Handle signed char when considering @charset (@asottile,
    [#1914])
  - New link to sassc-ruby in documentation (@itkrt2y, #1910)
  - Incorrectly quoting interpolated strings join with +
    (@mgreter, #1907)
  - Incorrectly erring when using &amp; and interpolation together
    (@xzyfer, #1904)
  - Incorrectly duplicating nested pseudo selectors (@mgreter,
    [#1901])
  - Unused function breaking breaking unity builds (@drewwells,
    [#1896])
  - Segfaulting when url() is empty (@xzyfer, #1886)
  - Should error when &amp; is used without a parent selector
    (@xzyfer, #1644)
  Version 3.3.3
  - ------------
  * Parser and rendering refactorings
    LibSass is now able to use stringification functions for its
    internal AST objects whenever its needed. Previously this was
    only possible when we had access to a context instance, which
    sometimes made it impossible to invoke the right code path.
    This tight coupling has been factored out and we can now use
    these more freely to get our output even closer to ruby sass.
    Parser now supports multiple operations without parentheses (a
    &gt; b == c) correctly and an extensive generated test suite for
    &gt; this feature was added to sass-spec.
  * Full support for variable arguments
    Since the introduction variable arguments in Sass 3.3 LibSass
    has been playing whack-a-mole with bug fixes. As of this
    release we should have argument handling compatible with the
    latest stable Ruby Sass. Thanks to @davidkpiano for his many
    detailed bug reports and his fantastic sassdash library whose
    extensive test suite helped make this possible.
  * Lots of bug-fixes
    There were two weeks of ongoing bug slaughtering by @mgreter
    after new-years eve, which resulted in over 80 closed issues
    (there are 117 closed github issues in total for this release).
    @xzyfer also had a good streak with 14 closed issues. Special
    thanks to @ksmadsen for his c++11 random_device fix.  Also a
    big thanks for our continuing contributors @am11 and @saper for
    their inputs, feedback and pull requests.
  - Ensure we keep around memory for parser source (@mgreter,
    [#1884])
  - Avoid wrong error due to misused map object in At_Rule
    (@mgreter, #1881)
  - Implement css linefeed \a handling better (@mgreter, #1880)
  - Improve parsing for complex number units (@mgreter, #1879)
  - Fix potential issue with wrong std container usage (@mgreter,
    [#1878])
  - Improve parsing for complex number units (@mgreter, #1877)
  - Improve operating on numbers with complex units (@mgreter,
    [#1876])
  - Make generating source excerpt on error unicode aware
    (@mgreter, #1875)
  - Improve error handling API (always return formatted json)
    (@mgreter, #1874)
  - Improve identifier schema to include variables (@mgreter,
    [#1872])
  - Disable error check for extend placement check (@mgreter,
    [#1870])
  - Improve pseudo selector parsing (@mgreter, #1864)
  - Fix each iteration over selector lists (@mgreter, #1863)
  - Use to_sass for @debug, @warn and @error message (@mgreter,
    [#1862])
  - Improve lower/upper boundary check error in for loop
    (@mgreter, #1861)
  - Implement incompatible unit test for interpolation in eval
    (@mgreter, #1860)
  - Implement correct empty list to_sass output (@mgreter, #1859)
  - Remove To_String by using AST-&gt;to_string and inspect
    (@mgreter, #1858)
  - Update license year range to 2016 (@pra85, #1857)
  - Incorrect 'Invalid UTF-8' error with a specific input length
    (@mgreter, #1856)
  - Adds include headers to VS meta files on windows (@am11,
    [#1850])
  - Implement missing error checks (@mgreter, #1848)
  - Fix SmartOS compilation once and for all (@mgreter, #1847)
  - Relative imports fail when outside working directory
    (@mgreter, #1846)
  - Disable error for empty source string on context (@mgreter,
    [#1845])
  - Fix expression parsing with comment between factors
    (@mgreter, #1844)
  - Refactor/milestone 3.4 (@mgreter, #1841)
  - @custom-media throws error (@mgreter, #1839)
  - Fix iterating over parent selector list with @each (@mgreter,
    [#1837])
  - Include unconditionally (@saper, #1835)
  - No file information for empty source string (@mgreter, #1834)
  - Improve parsing of media queries with comments (@mgreter,
    [#1833])
  - Prevent segfault with nested properties edge case (@mgreter,
    [#1832])
  - Implement extend for wrapped selectors (@mgreter, #1831)
  - Only parse interpolations in kept block comments (@mgreter,
    [#1830])
  - Implement import recursion check (@mgreter, #1829)
  - Error on invalid parent selector placements (@mgreter, #1828)
  - Fix look-ahead of parent selector with trailing BEM separator
    (@mgreter, #1827)
  - Fix join_paths when left path is not canonical (@mgreter,
    [#1826])
  - Error incorrectly thrown for &amp;__ selector (@mgreter, #1825)
  - Update .editorconfig (@numeraltwo, #1824)
  - Ampersand glued to the selector should be rejected (@mgreter,
    [#1822])
  - Selector-unify should return null instead of an empty list
    (@xzyfer, #1819, #1820)
  - Fix interpolations returning quoted string in selectors
    (@xzyfer, #1818)
  - Adds CRLF awareness to Util::quote() (@am11, #1817)
  - Fix multiple issues with function parameter binding (@xzyfer,
    [#1815])
  - While loops should release their local env when exiting early
    (@xzyfer, #1814)
  - Regression in variable scoping causing segfault (@xzyfer,
    [#1813])
  - Incorrect output for unknown at-rules (@mgreter, #1812)
  - Emit DLL which exports symbols on windows VS (@am11, #1811)
  - Add exit code for explicit test (@am11, #1810)
  - Support multiline url declarations (@xzyfer, #1809)
  - Incompatible units error in interpolations (@mgreter, #1804)
  - Segfault on missing semicolon (@mgreter, #1803)
  - Infinite import loop results in a stack overflow (@mgreter,
    [#1801])
  - Segmentation fault for interpolations in certain comments
    (@mgreter, #1798)
  - Placeholder selector inside :not() (@mgreter, #1797)
  - Append function doesn't appear to append correctly inside
    loops (@mgreter, #1796)
  - Media queries fail to parse when comment is present
    (@mgreter, #1794)
  - Incompatible units error for expressions in media queries
    (@mgreter, #1793)
  - Incorrectly building dynamic library on Windows (@mgreter,
    [#1790])
  - Fix libsass build for SmartOS (@mgreter, #1782)
  - Fix-up some docs on importers (undefined variables)
    (@asottile, #1780)
  - Using 'calc' shoes an Error: Incompatible units: 'px' and '%'
    (@mgreter, #1776)
  - Converts wchar_t* to UTF-8 std::string on windows (@am11,
    [#1774])
  - String Interpolation incorrectly quotes parent selectors
    (@xzyfer, #1770)
  - @debug on an empty list should produce () (@mgreter, #1768)
  - Removing duplicated content from c api example (@rodneyrehm,
    [#1767])
  - Comments between binary operands prevents evaluation
    (@mgreter, #1765)
  - Add crutch to help browsers interpreting source-maps
    (@mgreter, #1759)
  - bug with &amp; (parent-selector) and @each directive in 3.3.2
    (@mgreter, #1757)
  - Fix possible segfault in Each expansion (@mgreter, #1756)
  - Remove sixtuplet flag on Colors and fix edge case (@mgreter,
    [#1755])
  - Refactor to remove Context dependency from To_String
    (@mgreter, #1754)
  - Segmentation fault @each with argslist node-sass 3.4.2
    (@mgreter, #1752)
  - Wrong line reported in invalid operands for multiplication
    (@mgreter, #1751)
  - Implement variable shadow scoping (@mgreter, #1748)
  - Nested styles refer to top-level parent in source-map line
    number (@mgreter, #1747)
  - Variables in control flow should not be accessible in outer
    scopes (@mgreter, #1746)
  - Fix #1742 - same expression on both sides of &amp;&amp; (@saper,
    [#1744])
  - Don't allocate std::random_device statically (@ksmadsen,
    [#1743])
  - Ampersands in :not selector (@mgreter, #1741)
  - Improve binary expressions to preserve white-space at
    operands (@mgreter, #1739)
  - Defer creation of hash maps into eval stage (@mgreter, #1736)
  - Fix edge-case for extend with Wrapped_Selector (@mgreter,
    [#1735])
  - Interpolated, double-quoted vars can produce an empty output
    (@mgreter, #1734)
  - Fix error messages for min and max (@xzyfer, #1731)
  - Multiple nth-child selector with @extend compiles wrong
    (@mgreter, #1729)
  - Fix Binary operators adjacent to interpolations (@mgreter,
    [#1728])
  - Allow multiple unparenthesized expressions for operators
    (@mgreter, #1727)
  - Error: Import may not be used within controls or mixins. $100
  - Different results with @each and @for loop (@mgreter, #1723)
  - Extra white-space after "#{}" interpolation (@mgreter, #1722)
  - Fixes for Windows version (@Taritsyn, #1721)
  - @each on nested lists assigns the wrong value. (@mgreter,
    [#1709])
  - Avoid some clang compiler warnings (@mgreter, #1707)
  - Implement rounding precision (@mgreter, #1704)
  - No error for @extend %an-undefined-placeholder (@mgreter,
    [#1670])
  - Error on @debug, @warn or @error in properties (@mgreter,
    [#1653])
  - Improve selector look-ahead for "negative" binomials
    (@mgreter, #1652)
  - @extend inside @at-root doesn't work (@mgreter, #1651)
  - Space in argument for :nth-of-type(2n - 1) results in error
    (@mgreter, #1650)
  - All interpolation is unquoted (@xzyfer, #1647)
  - Arglist as single arg for varargs improperly gets destructed
    (@xzyfer, #1645)
  - Use the correct parsing semantics for @import url() (@xzyfer,
    [#1597])
  - Single comma separated must be surrounded by () on inspect.
    (@mgreter, #1583)
  - Error message mismatch for empty interpolation as an argument
    (@mgreter, #1564)
  - Error message mismatch for min (@xzyfer, #1559)
  - Disallow functions to be defined in control directives or
    mixins (@mgreter, #1550)
  - Minor issue parsing number units after double dash (@mgreter,
    [#1526])
  - Fixes some clang warnings (@mgreter, #1523)
  - Better support for @-moz-document (@mgreter, #1401)
  - Quoted colors in maps produces 'Duplicate key "transparent"
    in map' (@mgreter, #1169)
  - Permit multiline in URL (@xzyfer, #1096)
  - No error for missing imported base class in @extend
    (@mgreter, #871)
  * Improved spec tests
    With this release we have a bit more than 275 new spec tests.
    We started to include error tests too, which was quite
    difficult at the beginning, since we need to get the output
    100% correct to really pass a spec test, although we really
    only test the first line for error specs so far. None the less,
    with this release a lot more error messages are matching the
    ones of ruby sass and we also catch more cases. But we still
    let a lot more syntax silently pass than ruby sass does.</changelog>
  <changelog author="jengelh@inai.de" date="1479988800">- Redo descriptions and RPM groups</changelog>
  <changelog author="ronisbr@gmail.com" date="1486987200">- Run spec-cleaner.
- Version bump to 3.4.3.
  Upstream changelog:
  Version 3.4.3
  - ------------
  * Fixes
  - Fix segfault when comparing pseudo selectors (@xzyfer, #2289)
  - Fix thread-safety for mixin recursions check (@mgreter,
    [#2286])
  - Fix false parser errors (@xzyfer, #2095)
  - Fix bad source mappings for interpolated selectors (@mgreter,
    [#2224])
  - Fix not erring when encountering bad interpolations
    (@mgreter, #2081)
  - Fix some error messages to match Ruby Sass (@mgreter, #2267)
  Version 3.4.2
  - ------------
  * Features
  - Sass 3.4.23: Support url() with quotes in unknown directives
    (@mgreter, #2243)
  * Fixes
  - Test bootstrap ignoring SASS_SPEC_PATH and SASS_SASSC_PATH
    environment variables (@xzyfer, #2265)
  - Incorrect equality of interpolated values (@mgreter, #2261)
  - Incorrect error when @content is inside @at-root (@mgreter,
    [#2260])
  - C-API copy_options function losing some options (@mgreter,
    [#2257])
  - Segfault with calling calc (@mgreter, @xzyfer)
  Version 3.4.1
  - ------------
  * Fixes
  - Incorrect @extend with interpolated selectors in @at-root
    (@mgreter, #2246)
  - Incorrect dp unit conversions (@nex3, sass/sass#2143)
  - Incorrect str-slice behaviour with $end-at is negative
    (@xzyfer, #2240 sass/sass#2211)
  Version 3.4.0
  - ------------
  Over the last couple years we've worked very closely with the
  Ruby Sass team to reach Sass 3.4 compatibility.
  It's become clear that need to draw a line in sand with exactly
  how exactly we can match Sass 3.4, especially in the face of
  changes in Sass 3.5.
  With this release the LibSass team is marking the completion of
  active development on Sass 3.4 compatibility. From today we'll
  focus our efforts on Sass 3.5 compatibility, first prioritising
  CSS compatibility features like support for CSS custom property
  and CSS grids.  Improves to @at-root
  @at-root has mostly worked since it's introduction to LibSass but
  there have always been issue when it was combined with conditions
  (like @if) or mixins.  These issues were due to a fundamental
  difference in the LibSass implementation.  The difference has
  been addressed, so @at-root is now fully supported.
  You can read more about the specifics of this issue in #2089
  - Implement the Trace AST node (@xzyfer, #1585)
  - Remove the selector stack from the CSSize visitor (@xzyfer,
    [#2091])
  - Workaround parent selector issues with at-root (@xzyfer,
    [#2006] #2198)
  * Delayed Values
  Knowing when to evaluate a string, function, do concatenation, or
  perform math is a complicated problem with many edge cases.
  @mgreter has continued his work on improving the accuracy of
  these decisions.
  - Significant improvements to delayed values (@mgreter, #2042,
    [#2034] #2057)
  - / interpreted as division instead of separator (@mgreter,
    [#2149])
  - Mishandling quotes (@mgreter, #2153 #2156)
  * Continued improvements to @extend
  @extend is hard. With every release we get better at it and this
  release is no exception.
  - Extending inner of :not can lead to invalid css (@mgreter,
    [#2054])
  - Segfault with @extend (@mgreter, #2051)
  - Extending a placeholder from a media query outputs nothing
    (@mgreter, #2150)
  - Don't drop pseudo elements in wrapped selectors (@xzyfer,
    [#2200])
  * Memory improvments
  @mgreter has done some great work on improving our memory usage
  when dealing with large maps, and lists. He's not done yet, keep
  your eyes peeled for further improvments in upcomming releases.
  - Improve memory footprint when evaluating in loops (@mgreter,
    [#2171])
  * Support list functions on maps
  Implementing Sass maps was my first major contribution to
  LibSass. A couple year later I can finally all the job complete
  with support for maps in list functions.
  - Support list functions on maps (@xzyfer, #1930)
  * Sourcemaps
  @mgreter and @nschonni have made some significant improvements to
  our sourcemaps. You can read more about the specifics in the bug
  links below.
  - Bugfixes for source maps (@mgreter, #2216)
  * Fixes parent selector mappings
  * Fixes media block/query mappings
  * Fixes range over binary expressions
  * Don't include semicolon for statics
  * Fixes variable assignment mappings
  - Make paths in source comments relative to CWD (@mgreter,
    [#2219])
  - Implement source_map_file_urls option (@mgreter, #2220)
  - Re-order the sourcemap writing to match spec (@nschonni,
    [#2193])
  * Features
  - Improve debugger coverage (@xzyfer, #2093)
  - Add Sass lang version to 3.4 (@am11, #2077)
  - Automake compile on msys2 and mingw64 (@mgreter, #2063)
  - Improve Sass_Value documentation (@mgreter, #2045)
  - Add initial CONTRIBUTING.md and ISSUE_TEMPLATE.md (@mgreter,
    [#2044])
  - Update sass2scss to latest version (@mgreter, #2177 #1990
    [#1781])
  - Implement the check nesting visitor (@xzyfer, #2062)
  * Fixes
  - color-change() with $hue (@mgreter, #2113)
  - @import causing process to hang (@mgreter, #2106)
  - Broken link (@MoritzKn, #2105)
  - Specificity for Simple_Selectors nodes (@xzyfer, #2099)
  - @at-root without arguments (@xzyfer, #2092)
  - Segfault with calc prefix and underscore vs hyphen (@mgreter,
    [#2074])
  - Error message for missing arguments (@mgreter, #2067)
  - Warning under MSVC x86_64 (@asottile, #2047)
  - MSVC x86_64 buffer overrun in error reporting (@mgreter,
    [#2046])
  - Handling "\a" in interpolations (@mgreter, #1786)
  - Including a @mixin when outside of selector still outputs
    properties (@xzyfer, #1732)
  - Add error when comma lists are used as map keys (@mgreter,
    [#1537])
  - Evaluation of &amp; in sass script (@mgreter, #2124 #2116)
  - Handle unicode chars in unquoted urls (@mgreter, #2120
    @xzyfer, #2125)
  - hue() for rgb colors when $saturation: 0 (@mgreter, #2135)
  - Invalid duplicate keys in maps (@mgreter, #2118)
  - str-slice() with negative length (@mgreter, #2132)
  - Segfault parsing multiple operations in calc (@mgreter,
    [#2151])
  - Stackoverflow and segmentation failure on recrusive
    dependence mixins (@mgreter, #2144)
  - Don't allow math on maps (@mgreter, #2147)
  - Don't allow math on colors (@xzyfer, #2140)
  - CSS comment inside of @supports incorrect CSS output
    (@mgreter, #2158)
  - Check and error on empty variable assignments (@mgreter,
    [#2143] #2146)
  - Incorrect output when concatenating an empty string
    (@mgreter, #2169)
  - Brew 1.0.0 release causing OSX CI failures (@xzyfer, #2183)
  - Handling empty nested media queries (@xzyfer, #2154)
  - @at-root for loop and logic statements (@mgreter, #2187)
  - Typo in docs (@asottile, @2201)
  - Memory leak (@mgreter, #2211 #2213)
  - Using ... in an overloaded function causes fatal error
    (@mgreter, #2205)
  - Should error when attempting to output an empty list or map
    (@mgreter, #1452)
  - Don't error when an @import is terminated by the end of the
    block (@xzyfer, #2233)
  - Fix modulo operation (@mgreter, #2236)
  * Misc
  - Rename some selector AST nodes to better match the reference
    (@xzyfer, #2101)
  - Add php wrapper project link (@lesstif, #2121)
  - Add Elixir wrapper project link (@scottdavis, #2141)
  - Updated README (@am11, #2172)
  - Enabling debug builds by setting env var DEBUG=1
    (@delapuente, #2176)
  - Remove -ldl flag from OpenBSD too (@parhs, #2210)
  - Remove superfluous dev error message (@mgreter, #2217)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Version bump to 3.4.6.
  Upstream changelog:
  Version 3.4.5
  - ------------
  * Features
  - Implement trailing commas in parameters and arguments (@xzyfer,
    [#2288])
  - Implement unary slash expressions (@mgreter, #2349 and #2384)
  * Fixes
  - Fix Attribute Selector equal compare operator (@mgreter, #2350)
  - Fix segfault for varargs with non-string keys (@mgreter, #2352)
  - Fix Element Selector compare operators (@mgreter, #2347)
  - Fix compiler issue with spec regression on NetBSD 6.1 (@mgreter,
    [#2357])
  - Fix some segfaults caused by the parser being too forgiving
    (@xzyfer, #2367)
  - Fix segfault with invalid map keys (@xzyfer, #2368)
  - Fix null pointer dereference in css_error (@xzyfer, #2370)
  - Fix bug when parsing selector schemas (@xzyfer, #2371)
  - Fix null pointer dereference in parse_selector_schema (@xzyfer,
    [#2372])
  - Fix segfault when extending pseudo selectors failed (@mgreter,
    [#2366])
  - Fix parser for urls looking like ruleset selectors (@mgreter,
    [#2376])
  - Error for trailing rulesets comma (@mgreter, #2365)
  - Improve selector and binominal look ahead (@mgreter, #2346)
  - Improve hex escape handling in interpolation (@mgreter, #2320)
  - Fix wrong parsing of calc functions as number units (@mgreter,
    [#2382])
  - Skip comment evaluation for compressed output (@mgreter, #2359)
  - Improve parent selector handling in selector schema (@mgreter,
    [#2358])
  - Improve parameter vararg and keyword handling (@mgreter, #2394)
  - Hotfix to avoid invalid nested :not selectors (@mgreter, #2399)
  - Fix a few minor memory leaks (@mgreter, #2400)
  Version 3.4.4
  - ------------
  * Features
  - Update Visual Studio build facade (@am11, #2288)
  - Update read me (@mgreter, #2310)
  - Performance improvements for @extend (@mgreter, #2314)
  - Performance improvements (@mgreter, #2339)
  * Fixes
  - Disable FMA3 when compiling with Visual Studio 2013 (@am11,
    sass/node-sass#1854)
  - Fix for loop variable to be referenced (@mgreter, #2330)
  - Fix number compare issues when used as map keys with old gcc
    (@mgreter, #2331)
  - Fix results of map-get not being evaluated (@mgreter, #2309)
  - Fix null pointer access (@mgreter, sass/node-sass#1880)
  - Fix null pointer access (@mgreter, #2321)
  - Fix bug with media queries and @extend (@mgreter, #2341)
  * Misc
  - Cleanup initial shared ptr interface (@mgreter, #2299)
  - Refactor selector list and schema handling (@mgreter, #2300)
  - Cleanup context usage and extend code (#2313)
  - Cleanup misc (#2316, @nschonni)
  - Cleanup issues detected by clangs static analyser (#2336,
    @xzyfer)
  - Remove Textual intermediate AST node (@mgreter, #2338)
  - Add libsass-python to README (@asottile, #2340)</changelog>
  <changelog author="astieger@suse.com" date="1520596800">- update to 3.4.9:
  * Fix math with multiple units
  * Make error indicator Unicode aware
  * Make sourcemaps fully Unicode aware
  * Fix parser state column following static values
  * Fix memory leak of custom functions signature
  * Adding the missing scope identifier std::
  * Fix fall-trough warning in latest gnu gcc
  * Tweak warning message format
- includes changes frpm 3.4.8:
  * Implement case modifier for attribute selector
  * Emit warning for double parent selectors
  * Throw error if cwd goes missing
  * Throw error when mixin ruleset in root has parent selector
  * Fix to connect parent selector only once
  * Fix endless loop comparing Selector_List to List
  * Fix whitespace issue for wrapped selectors
- includes changes from 3.4.7:
  * Implement exponents for numbers
  * Implement long file path suppo
  * Error on quoted string in simple selector parsing
  * Do not compress colors in selectors
  * Fix issue when passing restargs to call
  * Fix issue with attribute selector unification
  * Improve wrapped pseudo selector handling
  * Improve extend of wrapped pseudo selectors
  * Fix propagation of named rest arguments
  * Do not output invisible support blocks
  * Various build makefile and CI related fixes
- 3.4.6:
  * Reverts accidental 3.5 feature - trailing commas in parameters
    and arguments
  * Reverts accidental breaking change - remove current working
    directory from search paths
  * Fix some memory corruptions
  * Fix CI instability
  * Fix CI for 3.4 release
  * Fix links in Markdown after Github changed its parser
  * Fix potential stack overflow
  * Fix file content malloc to avoid reading beyond buffer
  * Fix segfault in at-root cssize edge-case
  * Fix ref-counted value handling in if function
  * Fix segfault in selector append edge-case
  * Fix segfault in parser edge case
  * Fix usage of non-portable strdup
  * Fix case-sensitive lookup to parse colors
  * Fix selector parsing and url regression
- Use %license (boo#1082318)</changelog>
  <changelog author="gutaper@gmail.com" date="1521201600">- Update version to 3.5.1:
  Community:
  * Add sass.cr to implementations list (@straight-shoota, #2574)
  Fixes:
  * Fix compiler warnings (@mgreter, #2575)
  * Fix double free when run in concurrent processes (@mgreter, #2579)
  * Fix units sometimes being dropped in math operations (@mgreter, #2582)
  * Fix missing error for mixins defined within mixins (@mgreter, #2558)
- Includes changes from 3.5.0:
  Features:
  * Implement trailing commas in parameters and arguments (#2070, @xzyfer)
  * Implement deprecation warning for ID strings that look like colors (#2302, @xzyfer)
  * Implement content-exists function (#2266, @xzyfer)
  * Implement support for passing var() to CSS functions (#2244, @xzyfer)
  * Implement first class functions (#2277 #2275, @xzyfer)
  * Implement nesting guard to avoid "out of stack space" (#2438, @mgreter)
  * Implement exponents for numbers (#2465, @mgreter)
  * Implement long file path support for Windows (#2477, @mgreter)
  * Implement case modifier for attribute selector (#2509, @mgreter)
  * Implement warning for double parent selectors (#2522, @mgreter)
  * Implement support for custom property syntax (#2076, @xzyfer)
  * Implement support for custom-property feature flag (#2076, @xzyfer)
  Optimisations:
  * Performance improvements (#2339, @mgreter)
  * Fix memory leak by removing previously unused code (#2505, @mgreter)
  * Fix memory leak of custom functions signature (#2553, @mgreter)
  Community:
  * Add libsass-python to Readme (#2546, @asottile)
  * Update link to go-libsass (#2340 #2410, @drewwells)
  Fixes:
  * Fix media query stack and eval issue (#2341, @mgreter)
  * Fix Attribute Selector equal compare operator (#2347, @mgreter)
  * Fix segfault for varargs with non-string keys (#2352, @mgreter)
  * Fix Element Selector compare operators (#2347, @mgreter)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix some segfaults caused by the parser being too forgiving (#2367, @xzyfer)
  * Fix segfault with invalid map keys (#2368, @xzyfer)
  * Fix null pointer dereference in css_error (#2369, @xzyfer)
  * Fix bug when parsing selector schemas (#2371, @xzyfer)
  * Fix null pointer dereference when parsing selector schemas (#2371, @2372)
  * Fix .editorconfig (#2380, @brucek)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix segfault when extending pseudo selectors failed (#2366, @mgreter)
  * Fix parser for urls looking like ruleset selectors (#2376, @mgreter)
  * Fix use of non-portable std::to_string (#2385, @mgreter)
  * Fix use of non-portable strdup (#2459, @asottile)
  * Fix unary slash expressions (#2349 #2384, @mgreter)
  * Fix missing error for trailing comma in selector list (#2365, @mgreter)
  * Fix selector and binominal look ahead (#2346, @mgreter)
  * Fix hex escape handling in interpolation (#2320, @mgreter)
  * Fix wrong parsing of calc functions as number units (#2382, @mgreter)
  * Fix incorrect comment evaluation for compressed output (#2359, @mgreter)
  * Fix parent selector handling in selector schema (#2358, @mgreter)
  * Fix parameter vararg and keyword handling (#2394, @mgreter)
  * Fix a few minor memory leaks (#2400, @mgreter)
  * Fix issue with invalid error indicator (#2404, @mgreter)
  * Fix selector parsing and url regression (#2429, @mgreter)
  * Fix null ptr segv on invalid vararg (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector append edge-case (#2437, @mgreter)
  * Fix ref-counted value handling in if function (#2437, @mgreter)
  * Fix segfault in at-root cssize edge-case (#2439, @mgreter)
  * Fix file content malloc to avoid reading beyond buffer (#2440, @mgreter)
  * Fix case-sensitive lookup to named color map (#2462, @asottile)
  * Fix shebang for tap-driver (#2466, @naroga)
  * Fix segfault in parser edge case (#2446, @mgreter)
  * Fix memory corruption on error in parse_selector_schema (#2484, @mgreter)
  * Fix autoconf path for sassc tester (#2492, @mgreter)
  * Fix output of invisible @support blocks (#2488, @mgreter)
  * Fix to_value for bracketed lists (#2467, @mgreter)
  * Fix propagation of named rest arguments (#2480, @mgreter)
  * Fix @extend of wrapped selectors (#2468, @mgreter)
  * Fix wrapped pseudo selector handling (#2464 #2383, @mgreter)
  * Fix minor issue with attribute selector unification (#2053, @mgreter)
  * Fix issue when passing restargs to call (#2472, @mgreter)
  * Fix compressing of colors in selectors (#2232, @mgreter)
  * Fix missing error on selector with invalid quote mark (#2082, @mgreter)
  * Fix travis-ci mac OSX builds (#2527, @mgreter)
  * Fix endless loop comparing Selector_List to List (#2516 #2517, @mgreter)
  * Fix SmartOS/Solaris build regression (#2519, @mgreter)
  * Fix to connect parent selector only once (#2520, @mgreter)
  * Fix whitespace issue for wrapped selectors (#2366, @mgreter)
  * Fix missing error if cwd goes missing (#2513, @mgreter)
  * Fix missing error when mixin ruleset in root has parent selector (#2482, @mgreter)
  * Fix sourcemap crutch once again (#2312, @mgreter)
  * Fix parser state column following static values (#2542, @mgreter)
  * Fix error indicator not being Unicode aware (#2404, @mgreter)
  * Fix error sourcemaps not being fully Unicode aware (#2319, @mgreter)
  * Fix some compiler warnings (#2547, @mgreter)
  * Fix math with multiple units (#2549, @mgreter)
  * Fix css test for interpolated numbers (#2560, @mgreter)
  * Fix null pointer access in nesting check (sass/sassc#222 sass/sassc#223, @mgreter)
  * Fix @else possibly producing invalid output (#2569, @xzyfer)
  * Fix parsing of @supports declarations (#2452, @xzyfer)</changelog>
  <changelog author="gutaper@gmail.com" date="1524484800">- Update version to 3.5.3:
  Community:
  * Add nim-sass to implementations list (@zacharycarter, #2592)
  * Add Haskell bindings to implementations list (@jakubfijalkowski, #2612)
  * Add SharpScss and LibSassHost bindings to implementations list (@tompazourek, #2623)
  * Update node-sass link in implementations list (@xzyfer, b866ad5)
  * Update Unicode doc after forcing UTF8/plain ASCII (@mgreter, #2596)
  * Update compatibility section of the read me (@xzyfer, 9266d26)
  Features:
  * Update sass2scss@v1.1.2 (@mgreter, #2602)
  * Emit transparent colours as rgba(0, 0, 0, 0) (@xzyfer, #2298)
  * Add a sass_option_push_import_extension C-API (@xzyfer, #1964)
  Fixes:
  * Fix output/error for modulo zero operation (@mgreter, #2593)
  * Fix automake build if sassc is missing (@mgreter, #2601)
  * Fix handling of colours in @at directives (@mgreter, #2360)
  * Fix edge case converting achromatic colors to HSL (@mgreter, #2604)
  * Fix evaluation of arithmetic inside interpolation (@mgreter, #2203)
  * Fix handling of @important in custom properties (@xzyfer, #2590)
  * Fix duplicate definition of out_of_memory macro (@thatguystone, #2619)
  * Fix merging of nested media queries with negation (@xzyfer, #2425)
  * Fix regression in parsing selector with trailing escaped colon (@xzyfer, #2625)
  * Fix segfault on empty custom properties (@xzyfer, sass/sassc#225)
- Includes changes from 3.5.1:
  Features:
  * Implement more detailed backtraces (@mgreter, #2573)
  Fixes:
  * Fix parsing of block comments to ignore css string rules (@mgreter, #1294)
  * Fix win UNC path handling for dot and dotdot directories (@mgreter, #2588)</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1562932800">- Update version to 3.6.1:
  * Fix use-after-free vulnerability in sass_context.cpp:handle_error
    bsc#1096894, CVE-2018-11499
  * Disallow parent selector in selector_fns arguments
    bsc#1118301, CVE-2018-19797
  * Fix use-after-free vulnerability exists in the SharedPtr class
    bsc#1118346, CVE-2018-19827
  * Fix stack-overflow in Eval::operator()
    bsc#1118348, CVE-2018-19837
  * Fix stack-overflow at IMPLEMENT_AST_OPERATORS expansion
    bsc#1118349, CVE-2018-19838
  * Fix buffer-overflow (OOB read) against some invalid input
    bsc#1118351, CVE-2018-19839
  * Fix Null pointer dereference in Sass::Eval::operator()(Sass::Supports_Operator*)
    bsc#1119789, CVE-2018-20190
  * Fix heap-buffer-overflow in Sass::Prelexer::parenthese_scope(char const*)
    bsc#1121943, CVE-2019-6283
  * Fix heap-based buffer over-read exists in Sass:Prelexer:alternatives
    bsc#1121944, CVE-2019-6284
  * Fix heap-based buffer over-read exists in Sass:Prelexer:skip_over_scopes
    bsc#1121945, CVE-2019-6286
  * Fix uncontrolled recursion in Sass:Parser:parse_css_variable_value
    bsc#1133200, CVE-2018-20821
  * Fix stack-overflow at Sass::Inspect::operator()
    bsc#1133201, CVE-2018-20822</changelog>
</package>
<package pkgid="e4601ba576a938abade66f577132eed6f8e3531ff98e39770add9558c71736a2" name="libsass-3_6_1-1" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
  <changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
  <changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
  <changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
  <changelog author="ronisbr@gmail.com" date="1479902400">- Run spec-cleaner.
- Remove unecessary `BuildRoot` in .spec.
- Remove two non-breaking spaces in .spec that were leading to
  a rpmlint warning.
- Version bump to 3.3.6.
  Upstream changelog:
  Version 3.3.6
  - ------------
  * Feature
  - Expose the Sass language version via the C API
    (@chriseppstein, #2021)
  * Fixes
  - Incorrectly erring on comments in at-rules (@mgreter, #1233)
  - Incorrectly dropping internal state of AST nodes (@mgreter,
    [#1661])
  - Incorrectly parsing the calc function (@mgreter, #1706)
  - Segfault during error handling (@mgreter, #2016)
  - Incorrectly identifying the selectors with type-of (@mgreter,
    [#2020])
  - Incorrectly erring on ID selectors starting with a number
    (@mgreter, @2023)
  - Producing incorrect output when compile with MSVC (@mgreter,
    [#2039])
  - Various segfaults and incorrect output from @extend
    (@mgreter, #2017 #2031)
  Version 3.3.5
  - ------------
  * Expose our memory allocator
    This feature has taken many proposed forms over the last 4
    months. After much patent and considered discussion by @am11
    @mgreter @saper and @xoofx you can now access our memory
    allocator on the C-API.
    void* sass_alloc_memory(size_t size)
    char* sass_copy_c_string(const char* str)
    void sass_free_memory(void* ptr)
  * Features
  - Re-add sass_option_push_include_path and
    sass_option_push_plugin_path (@xoofx, #1974)
  * Build
  - Enable address sanitizer for clang (@mgreter, #2003)
  - MSVC assert too strict (@mgreter, #1985)
  - Update Sass spec (@xzyfer, 1967)
  * Fixes
  - Incorrectly erring on @extend and @media (@mgreter, #2009
    [#2007], #1927, #1923)
  - Incorrectly erring on @extend and interpolated selectors
    (@mgreter, #2000)
  - Builds not failing when Sass spec fails to load (@saper,
    [#1997])
  - Incorrectly erring on Sass comments in selectors (@mgreter,
    [#1996])
  - Incorrectly erring on @extend and interpolated selectors with
    the !optional flag (@mgreter, #1993)
  - Incorrectly treating 0 and false as the same value when used
    as map keys (@mgreter, #1991)
  - Incorrectly erring on escaped and unicode selectors
    (@mgreter, #1977)
  - Incorrectly rendering @extend and @supports (@mgreter, #1971)
  - Incorrectly erring on functions beginning with calc
    (@mgreter, #1969)
  - Incorrectly quoting interpolated strings in selectors
    (@mgreter, #1947)
  - Incorrectly escaped escaped strings in selectors (@mgreter,
    [#1945])
  - Incorrectly duplicating executing of function in interpolated
    string (@mgreter, #1944)
  - Prevent parsing url() resulting in an endless loop (@mgreter,
    [#1931])
  - Compilation error with using -DDEBUG flag (@tony, #1917)
  - Incorrectly removing @media blocks that contain only CSS
    comments (@mgreter, #1889)
  - Better handling of / in function arguments (@mgreter, #1417)
  Version 3.3.4
  - ------------
  * Fixes
  - Inconsistent error message produced when nesting functions
    and mixins (@xzyfer, #1941)
  - Ensure custom importers are executed for all @imports
    (@xzyfer, #1935)
  - Ensure custom importers are executed in the correct order
    (@xzyfer, #1921)
  - Possible segfault when generating sourcemaps (@usta, #1920)
  - Memory leak (@usta, #1919)
  - Unused variable warning (@xzyfer, #1918)
  - Segfaulting when @extending an undefined selector (@mgreter,
    [#1916])
  - Incorrectly erring when @extending inside a mixin (@xzyfer,
    [#1915])
  - Handle signed char when considering @charset (@asottile,
    [#1914])
  - New link to sassc-ruby in documentation (@itkrt2y, #1910)
  - Incorrectly quoting interpolated strings join with +
    (@mgreter, #1907)
  - Incorrectly erring when using &amp; and interpolation together
    (@xzyfer, #1904)
  - Incorrectly duplicating nested pseudo selectors (@mgreter,
    [#1901])
  - Unused function breaking breaking unity builds (@drewwells,
    [#1896])
  - Segfaulting when url() is empty (@xzyfer, #1886)
  - Should error when &amp; is used without a parent selector
    (@xzyfer, #1644)
  Version 3.3.3
  - ------------
  * Parser and rendering refactorings
    LibSass is now able to use stringification functions for its
    internal AST objects whenever its needed. Previously this was
    only possible when we had access to a context instance, which
    sometimes made it impossible to invoke the right code path.
    This tight coupling has been factored out and we can now use
    these more freely to get our output even closer to ruby sass.
    Parser now supports multiple operations without parentheses (a
    &gt; b == c) correctly and an extensive generated test suite for
    &gt; this feature was added to sass-spec.
  * Full support for variable arguments
    Since the introduction variable arguments in Sass 3.3 LibSass
    has been playing whack-a-mole with bug fixes. As of this
    release we should have argument handling compatible with the
    latest stable Ruby Sass. Thanks to @davidkpiano for his many
    detailed bug reports and his fantastic sassdash library whose
    extensive test suite helped make this possible.
  * Lots of bug-fixes
    There were two weeks of ongoing bug slaughtering by @mgreter
    after new-years eve, which resulted in over 80 closed issues
    (there are 117 closed github issues in total for this release).
    @xzyfer also had a good streak with 14 closed issues. Special
    thanks to @ksmadsen for his c++11 random_device fix.  Also a
    big thanks for our continuing contributors @am11 and @saper for
    their inputs, feedback and pull requests.
  - Ensure we keep around memory for parser source (@mgreter,
    [#1884])
  - Avoid wrong error due to misused map object in At_Rule
    (@mgreter, #1881)
  - Implement css linefeed \a handling better (@mgreter, #1880)
  - Improve parsing for complex number units (@mgreter, #1879)
  - Fix potential issue with wrong std container usage (@mgreter,
    [#1878])
  - Improve parsing for complex number units (@mgreter, #1877)
  - Improve operating on numbers with complex units (@mgreter,
    [#1876])
  - Make generating source excerpt on error unicode aware
    (@mgreter, #1875)
  - Improve error handling API (always return formatted json)
    (@mgreter, #1874)
  - Improve identifier schema to include variables (@mgreter,
    [#1872])
  - Disable error check for extend placement check (@mgreter,
    [#1870])
  - Improve pseudo selector parsing (@mgreter, #1864)
  - Fix each iteration over selector lists (@mgreter, #1863)
  - Use to_sass for @debug, @warn and @error message (@mgreter,
    [#1862])
  - Improve lower/upper boundary check error in for loop
    (@mgreter, #1861)
  - Implement incompatible unit test for interpolation in eval
    (@mgreter, #1860)
  - Implement correct empty list to_sass output (@mgreter, #1859)
  - Remove To_String by using AST-&gt;to_string and inspect
    (@mgreter, #1858)
  - Update license year range to 2016 (@pra85, #1857)
  - Incorrect 'Invalid UTF-8' error with a specific input length
    (@mgreter, #1856)
  - Adds include headers to VS meta files on windows (@am11,
    [#1850])
  - Implement missing error checks (@mgreter, #1848)
  - Fix SmartOS compilation once and for all (@mgreter, #1847)
  - Relative imports fail when outside working directory
    (@mgreter, #1846)
  - Disable error for empty source string on context (@mgreter,
    [#1845])
  - Fix expression parsing with comment between factors
    (@mgreter, #1844)
  - Refactor/milestone 3.4 (@mgreter, #1841)
  - @custom-media throws error (@mgreter, #1839)
  - Fix iterating over parent selector list with @each (@mgreter,
    [#1837])
  - Include unconditionally (@saper, #1835)
  - No file information for empty source string (@mgreter, #1834)
  - Improve parsing of media queries with comments (@mgreter,
    [#1833])
  - Prevent segfault with nested properties edge case (@mgreter,
    [#1832])
  - Implement extend for wrapped selectors (@mgreter, #1831)
  - Only parse interpolations in kept block comments (@mgreter,
    [#1830])
  - Implement import recursion check (@mgreter, #1829)
  - Error on invalid parent selector placements (@mgreter, #1828)
  - Fix look-ahead of parent selector with trailing BEM separator
    (@mgreter, #1827)
  - Fix join_paths when left path is not canonical (@mgreter,
    [#1826])
  - Error incorrectly thrown for &amp;__ selector (@mgreter, #1825)
  - Update .editorconfig (@numeraltwo, #1824)
  - Ampersand glued to the selector should be rejected (@mgreter,
    [#1822])
  - Selector-unify should return null instead of an empty list
    (@xzyfer, #1819, #1820)
  - Fix interpolations returning quoted string in selectors
    (@xzyfer, #1818)
  - Adds CRLF awareness to Util::quote() (@am11, #1817)
  - Fix multiple issues with function parameter binding (@xzyfer,
    [#1815])
  - While loops should release their local env when exiting early
    (@xzyfer, #1814)
  - Regression in variable scoping causing segfault (@xzyfer,
    [#1813])
  - Incorrect output for unknown at-rules (@mgreter, #1812)
  - Emit DLL which exports symbols on windows VS (@am11, #1811)
  - Add exit code for explicit test (@am11, #1810)
  - Support multiline url declarations (@xzyfer, #1809)
  - Incompatible units error in interpolations (@mgreter, #1804)
  - Segfault on missing semicolon (@mgreter, #1803)
  - Infinite import loop results in a stack overflow (@mgreter,
    [#1801])
  - Segmentation fault for interpolations in certain comments
    (@mgreter, #1798)
  - Placeholder selector inside :not() (@mgreter, #1797)
  - Append function doesn't appear to append correctly inside
    loops (@mgreter, #1796)
  - Media queries fail to parse when comment is present
    (@mgreter, #1794)
  - Incompatible units error for expressions in media queries
    (@mgreter, #1793)
  - Incorrectly building dynamic library on Windows (@mgreter,
    [#1790])
  - Fix libsass build for SmartOS (@mgreter, #1782)
  - Fix-up some docs on importers (undefined variables)
    (@asottile, #1780)
  - Using 'calc' shoes an Error: Incompatible units: 'px' and '%'
    (@mgreter, #1776)
  - Converts wchar_t* to UTF-8 std::string on windows (@am11,
    [#1774])
  - String Interpolation incorrectly quotes parent selectors
    (@xzyfer, #1770)
  - @debug on an empty list should produce () (@mgreter, #1768)
  - Removing duplicated content from c api example (@rodneyrehm,
    [#1767])
  - Comments between binary operands prevents evaluation
    (@mgreter, #1765)
  - Add crutch to help browsers interpreting source-maps
    (@mgreter, #1759)
  - bug with &amp; (parent-selector) and @each directive in 3.3.2
    (@mgreter, #1757)
  - Fix possible segfault in Each expansion (@mgreter, #1756)
  - Remove sixtuplet flag on Colors and fix edge case (@mgreter,
    [#1755])
  - Refactor to remove Context dependency from To_String
    (@mgreter, #1754)
  - Segmentation fault @each with argslist node-sass 3.4.2
    (@mgreter, #1752)
  - Wrong line reported in invalid operands for multiplication
    (@mgreter, #1751)
  - Implement variable shadow scoping (@mgreter, #1748)
  - Nested styles refer to top-level parent in source-map line
    number (@mgreter, #1747)
  - Variables in control flow should not be accessible in outer
    scopes (@mgreter, #1746)
  - Fix #1742 - same expression on both sides of &amp;&amp; (@saper,
    [#1744])
  - Don't allocate std::random_device statically (@ksmadsen,
    [#1743])
  - Ampersands in :not selector (@mgreter, #1741)
  - Improve binary expressions to preserve white-space at
    operands (@mgreter, #1739)
  - Defer creation of hash maps into eval stage (@mgreter, #1736)
  - Fix edge-case for extend with Wrapped_Selector (@mgreter,
    [#1735])
  - Interpolated, double-quoted vars can produce an empty output
    (@mgreter, #1734)
  - Fix error messages for min and max (@xzyfer, #1731)
  - Multiple nth-child selector with @extend compiles wrong
    (@mgreter, #1729)
  - Fix Binary operators adjacent to interpolations (@mgreter,
    [#1728])
  - Allow multiple unparenthesized expressions for operators
    (@mgreter, #1727)
  - Error: Import may not be used within controls or mixins. $100
  - Different results with @each and @for loop (@mgreter, #1723)
  - Extra white-space after "#{}" interpolation (@mgreter, #1722)
  - Fixes for Windows version (@Taritsyn, #1721)
  - @each on nested lists assigns the wrong value. (@mgreter,
    [#1709])
  - Avoid some clang compiler warnings (@mgreter, #1707)
  - Implement rounding precision (@mgreter, #1704)
  - No error for @extend %an-undefined-placeholder (@mgreter,
    [#1670])
  - Error on @debug, @warn or @error in properties (@mgreter,
    [#1653])
  - Improve selector look-ahead for "negative" binomials
    (@mgreter, #1652)
  - @extend inside @at-root doesn't work (@mgreter, #1651)
  - Space in argument for :nth-of-type(2n - 1) results in error
    (@mgreter, #1650)
  - All interpolation is unquoted (@xzyfer, #1647)
  - Arglist as single arg for varargs improperly gets destructed
    (@xzyfer, #1645)
  - Use the correct parsing semantics for @import url() (@xzyfer,
    [#1597])
  - Single comma separated must be surrounded by () on inspect.
    (@mgreter, #1583)
  - Error message mismatch for empty interpolation as an argument
    (@mgreter, #1564)
  - Error message mismatch for min (@xzyfer, #1559)
  - Disallow functions to be defined in control directives or
    mixins (@mgreter, #1550)
  - Minor issue parsing number units after double dash (@mgreter,
    [#1526])
  - Fixes some clang warnings (@mgreter, #1523)
  - Better support for @-moz-document (@mgreter, #1401)
  - Quoted colors in maps produces 'Duplicate key "transparent"
    in map' (@mgreter, #1169)
  - Permit multiline in URL (@xzyfer, #1096)
  - No error for missing imported base class in @extend
    (@mgreter, #871)
  * Improved spec tests
    With this release we have a bit more than 275 new spec tests.
    We started to include error tests too, which was quite
    difficult at the beginning, since we need to get the output
    100% correct to really pass a spec test, although we really
    only test the first line for error specs so far. None the less,
    with this release a lot more error messages are matching the
    ones of ruby sass and we also catch more cases. But we still
    let a lot more syntax silently pass than ruby sass does.</changelog>
  <changelog author="jengelh@inai.de" date="1479988800">- Redo descriptions and RPM groups</changelog>
  <changelog author="ronisbr@gmail.com" date="1486987200">- Run spec-cleaner.
- Version bump to 3.4.3.
  Upstream changelog:
  Version 3.4.3
  - ------------
  * Fixes
  - Fix segfault when comparing pseudo selectors (@xzyfer, #2289)
  - Fix thread-safety for mixin recursions check (@mgreter,
    [#2286])
  - Fix false parser errors (@xzyfer, #2095)
  - Fix bad source mappings for interpolated selectors (@mgreter,
    [#2224])
  - Fix not erring when encountering bad interpolations
    (@mgreter, #2081)
  - Fix some error messages to match Ruby Sass (@mgreter, #2267)
  Version 3.4.2
  - ------------
  * Features
  - Sass 3.4.23: Support url() with quotes in unknown directives
    (@mgreter, #2243)
  * Fixes
  - Test bootstrap ignoring SASS_SPEC_PATH and SASS_SASSC_PATH
    environment variables (@xzyfer, #2265)
  - Incorrect equality of interpolated values (@mgreter, #2261)
  - Incorrect error when @content is inside @at-root (@mgreter,
    [#2260])
  - C-API copy_options function losing some options (@mgreter,
    [#2257])
  - Segfault with calling calc (@mgreter, @xzyfer)
  Version 3.4.1
  - ------------
  * Fixes
  - Incorrect @extend with interpolated selectors in @at-root
    (@mgreter, #2246)
  - Incorrect dp unit conversions (@nex3, sass/sass#2143)
  - Incorrect str-slice behaviour with $end-at is negative
    (@xzyfer, #2240 sass/sass#2211)
  Version 3.4.0
  - ------------
  Over the last couple years we've worked very closely with the
  Ruby Sass team to reach Sass 3.4 compatibility.
  It's become clear that need to draw a line in sand with exactly
  how exactly we can match Sass 3.4, especially in the face of
  changes in Sass 3.5.
  With this release the LibSass team is marking the completion of
  active development on Sass 3.4 compatibility. From today we'll
  focus our efforts on Sass 3.5 compatibility, first prioritising
  CSS compatibility features like support for CSS custom property
  and CSS grids.  Improves to @at-root
  @at-root has mostly worked since it's introduction to LibSass but
  there have always been issue when it was combined with conditions
  (like @if) or mixins.  These issues were due to a fundamental
  difference in the LibSass implementation.  The difference has
  been addressed, so @at-root is now fully supported.
  You can read more about the specifics of this issue in #2089
  - Implement the Trace AST node (@xzyfer, #1585)
  - Remove the selector stack from the CSSize visitor (@xzyfer,
    [#2091])
  - Workaround parent selector issues with at-root (@xzyfer,
    [#2006] #2198)
  * Delayed Values
  Knowing when to evaluate a string, function, do concatenation, or
  perform math is a complicated problem with many edge cases.
  @mgreter has continued his work on improving the accuracy of
  these decisions.
  - Significant improvements to delayed values (@mgreter, #2042,
    [#2034] #2057)
  - / interpreted as division instead of separator (@mgreter,
    [#2149])
  - Mishandling quotes (@mgreter, #2153 #2156)
  * Continued improvements to @extend
  @extend is hard. With every release we get better at it and this
  release is no exception.
  - Extending inner of :not can lead to invalid css (@mgreter,
    [#2054])
  - Segfault with @extend (@mgreter, #2051)
  - Extending a placeholder from a media query outputs nothing
    (@mgreter, #2150)
  - Don't drop pseudo elements in wrapped selectors (@xzyfer,
    [#2200])
  * Memory improvments
  @mgreter has done some great work on improving our memory usage
  when dealing with large maps, and lists. He's not done yet, keep
  your eyes peeled for further improvments in upcomming releases.
  - Improve memory footprint when evaluating in loops (@mgreter,
    [#2171])
  * Support list functions on maps
  Implementing Sass maps was my first major contribution to
  LibSass. A couple year later I can finally all the job complete
  with support for maps in list functions.
  - Support list functions on maps (@xzyfer, #1930)
  * Sourcemaps
  @mgreter and @nschonni have made some significant improvements to
  our sourcemaps. You can read more about the specifics in the bug
  links below.
  - Bugfixes for source maps (@mgreter, #2216)
  * Fixes parent selector mappings
  * Fixes media block/query mappings
  * Fixes range over binary expressions
  * Don't include semicolon for statics
  * Fixes variable assignment mappings
  - Make paths in source comments relative to CWD (@mgreter,
    [#2219])
  - Implement source_map_file_urls option (@mgreter, #2220)
  - Re-order the sourcemap writing to match spec (@nschonni,
    [#2193])
  * Features
  - Improve debugger coverage (@xzyfer, #2093)
  - Add Sass lang version to 3.4 (@am11, #2077)
  - Automake compile on msys2 and mingw64 (@mgreter, #2063)
  - Improve Sass_Value documentation (@mgreter, #2045)
  - Add initial CONTRIBUTING.md and ISSUE_TEMPLATE.md (@mgreter,
    [#2044])
  - Update sass2scss to latest version (@mgreter, #2177 #1990
    [#1781])
  - Implement the check nesting visitor (@xzyfer, #2062)
  * Fixes
  - color-change() with $hue (@mgreter, #2113)
  - @import causing process to hang (@mgreter, #2106)
  - Broken link (@MoritzKn, #2105)
  - Specificity for Simple_Selectors nodes (@xzyfer, #2099)
  - @at-root without arguments (@xzyfer, #2092)
  - Segfault with calc prefix and underscore vs hyphen (@mgreter,
    [#2074])
  - Error message for missing arguments (@mgreter, #2067)
  - Warning under MSVC x86_64 (@asottile, #2047)
  - MSVC x86_64 buffer overrun in error reporting (@mgreter,
    [#2046])
  - Handling "\a" in interpolations (@mgreter, #1786)
  - Including a @mixin when outside of selector still outputs
    properties (@xzyfer, #1732)
  - Add error when comma lists are used as map keys (@mgreter,
    [#1537])
  - Evaluation of &amp; in sass script (@mgreter, #2124 #2116)
  - Handle unicode chars in unquoted urls (@mgreter, #2120
    @xzyfer, #2125)
  - hue() for rgb colors when $saturation: 0 (@mgreter, #2135)
  - Invalid duplicate keys in maps (@mgreter, #2118)
  - str-slice() with negative length (@mgreter, #2132)
  - Segfault parsing multiple operations in calc (@mgreter,
    [#2151])
  - Stackoverflow and segmentation failure on recrusive
    dependence mixins (@mgreter, #2144)
  - Don't allow math on maps (@mgreter, #2147)
  - Don't allow math on colors (@xzyfer, #2140)
  - CSS comment inside of @supports incorrect CSS output
    (@mgreter, #2158)
  - Check and error on empty variable assignments (@mgreter,
    [#2143] #2146)
  - Incorrect output when concatenating an empty string
    (@mgreter, #2169)
  - Brew 1.0.0 release causing OSX CI failures (@xzyfer, #2183)
  - Handling empty nested media queries (@xzyfer, #2154)
  - @at-root for loop and logic statements (@mgreter, #2187)
  - Typo in docs (@asottile, @2201)
  - Memory leak (@mgreter, #2211 #2213)
  - Using ... in an overloaded function causes fatal error
    (@mgreter, #2205)
  - Should error when attempting to output an empty list or map
    (@mgreter, #1452)
  - Don't error when an @import is terminated by the end of the
    block (@xzyfer, #2233)
  - Fix modulo operation (@mgreter, #2236)
  * Misc
  - Rename some selector AST nodes to better match the reference
    (@xzyfer, #2101)
  - Add php wrapper project link (@lesstif, #2121)
  - Add Elixir wrapper project link (@scottdavis, #2141)
  - Updated README (@am11, #2172)
  - Enabling debug builds by setting env var DEBUG=1
    (@delapuente, #2176)
  - Remove -ldl flag from OpenBSD too (@parhs, #2210)
  - Remove superfluous dev error message (@mgreter, #2217)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Version bump to 3.4.6.
  Upstream changelog:
  Version 3.4.5
  - ------------
  * Features
  - Implement trailing commas in parameters and arguments (@xzyfer,
    [#2288])
  - Implement unary slash expressions (@mgreter, #2349 and #2384)
  * Fixes
  - Fix Attribute Selector equal compare operator (@mgreter, #2350)
  - Fix segfault for varargs with non-string keys (@mgreter, #2352)
  - Fix Element Selector compare operators (@mgreter, #2347)
  - Fix compiler issue with spec regression on NetBSD 6.1 (@mgreter,
    [#2357])
  - Fix some segfaults caused by the parser being too forgiving
    (@xzyfer, #2367)
  - Fix segfault with invalid map keys (@xzyfer, #2368)
  - Fix null pointer dereference in css_error (@xzyfer, #2370)
  - Fix bug when parsing selector schemas (@xzyfer, #2371)
  - Fix null pointer dereference in parse_selector_schema (@xzyfer,
    [#2372])
  - Fix segfault when extending pseudo selectors failed (@mgreter,
    [#2366])
  - Fix parser for urls looking like ruleset selectors (@mgreter,
    [#2376])
  - Error for trailing rulesets comma (@mgreter, #2365)
  - Improve selector and binominal look ahead (@mgreter, #2346)
  - Improve hex escape handling in interpolation (@mgreter, #2320)
  - Fix wrong parsing of calc functions as number units (@mgreter,
    [#2382])
  - Skip comment evaluation for compressed output (@mgreter, #2359)
  - Improve parent selector handling in selector schema (@mgreter,
    [#2358])
  - Improve parameter vararg and keyword handling (@mgreter, #2394)
  - Hotfix to avoid invalid nested :not selectors (@mgreter, #2399)
  - Fix a few minor memory leaks (@mgreter, #2400)
  Version 3.4.4
  - ------------
  * Features
  - Update Visual Studio build facade (@am11, #2288)
  - Update read me (@mgreter, #2310)
  - Performance improvements for @extend (@mgreter, #2314)
  - Performance improvements (@mgreter, #2339)
  * Fixes
  - Disable FMA3 when compiling with Visual Studio 2013 (@am11,
    sass/node-sass#1854)
  - Fix for loop variable to be referenced (@mgreter, #2330)
  - Fix number compare issues when used as map keys with old gcc
    (@mgreter, #2331)
  - Fix results of map-get not being evaluated (@mgreter, #2309)
  - Fix null pointer access (@mgreter, sass/node-sass#1880)
  - Fix null pointer access (@mgreter, #2321)
  - Fix bug with media queries and @extend (@mgreter, #2341)
  * Misc
  - Cleanup initial shared ptr interface (@mgreter, #2299)
  - Refactor selector list and schema handling (@mgreter, #2300)
  - Cleanup context usage and extend code (#2313)
  - Cleanup misc (#2316, @nschonni)
  - Cleanup issues detected by clangs static analyser (#2336,
    @xzyfer)
  - Remove Textual intermediate AST node (@mgreter, #2338)
  - Add libsass-python to README (@asottile, #2340)</changelog>
  <changelog author="astieger@suse.com" date="1520596800">- update to 3.4.9:
  * Fix math with multiple units
  * Make error indicator Unicode aware
  * Make sourcemaps fully Unicode aware
  * Fix parser state column following static values
  * Fix memory leak of custom functions signature
  * Adding the missing scope identifier std::
  * Fix fall-trough warning in latest gnu gcc
  * Tweak warning message format
- includes changes frpm 3.4.8:
  * Implement case modifier for attribute selector
  * Emit warning for double parent selectors
  * Throw error if cwd goes missing
  * Throw error when mixin ruleset in root has parent selector
  * Fix to connect parent selector only once
  * Fix endless loop comparing Selector_List to List
  * Fix whitespace issue for wrapped selectors
- includes changes from 3.4.7:
  * Implement exponents for numbers
  * Implement long file path suppo
  * Error on quoted string in simple selector parsing
  * Do not compress colors in selectors
  * Fix issue when passing restargs to call
  * Fix issue with attribute selector unification
  * Improve wrapped pseudo selector handling
  * Improve extend of wrapped pseudo selectors
  * Fix propagation of named rest arguments
  * Do not output invisible support blocks
  * Various build makefile and CI related fixes
- 3.4.6:
  * Reverts accidental 3.5 feature - trailing commas in parameters
    and arguments
  * Reverts accidental breaking change - remove current working
    directory from search paths
  * Fix some memory corruptions
  * Fix CI instability
  * Fix CI for 3.4 release
  * Fix links in Markdown after Github changed its parser
  * Fix potential stack overflow
  * Fix file content malloc to avoid reading beyond buffer
  * Fix segfault in at-root cssize edge-case
  * Fix ref-counted value handling in if function
  * Fix segfault in selector append edge-case
  * Fix segfault in parser edge case
  * Fix usage of non-portable strdup
  * Fix case-sensitive lookup to parse colors
  * Fix selector parsing and url regression
- Use %license (boo#1082318)</changelog>
  <changelog author="gutaper@gmail.com" date="1521201600">- Update version to 3.5.1:
  Community:
  * Add sass.cr to implementations list (@straight-shoota, #2574)
  Fixes:
  * Fix compiler warnings (@mgreter, #2575)
  * Fix double free when run in concurrent processes (@mgreter, #2579)
  * Fix units sometimes being dropped in math operations (@mgreter, #2582)
  * Fix missing error for mixins defined within mixins (@mgreter, #2558)
- Includes changes from 3.5.0:
  Features:
  * Implement trailing commas in parameters and arguments (#2070, @xzyfer)
  * Implement deprecation warning for ID strings that look like colors (#2302, @xzyfer)
  * Implement content-exists function (#2266, @xzyfer)
  * Implement support for passing var() to CSS functions (#2244, @xzyfer)
  * Implement first class functions (#2277 #2275, @xzyfer)
  * Implement nesting guard to avoid "out of stack space" (#2438, @mgreter)
  * Implement exponents for numbers (#2465, @mgreter)
  * Implement long file path support for Windows (#2477, @mgreter)
  * Implement case modifier for attribute selector (#2509, @mgreter)
  * Implement warning for double parent selectors (#2522, @mgreter)
  * Implement support for custom property syntax (#2076, @xzyfer)
  * Implement support for custom-property feature flag (#2076, @xzyfer)
  Optimisations:
  * Performance improvements (#2339, @mgreter)
  * Fix memory leak by removing previously unused code (#2505, @mgreter)
  * Fix memory leak of custom functions signature (#2553, @mgreter)
  Community:
  * Add libsass-python to Readme (#2546, @asottile)
  * Update link to go-libsass (#2340 #2410, @drewwells)
  Fixes:
  * Fix media query stack and eval issue (#2341, @mgreter)
  * Fix Attribute Selector equal compare operator (#2347, @mgreter)
  * Fix segfault for varargs with non-string keys (#2352, @mgreter)
  * Fix Element Selector compare operators (#2347, @mgreter)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix some segfaults caused by the parser being too forgiving (#2367, @xzyfer)
  * Fix segfault with invalid map keys (#2368, @xzyfer)
  * Fix null pointer dereference in css_error (#2369, @xzyfer)
  * Fix bug when parsing selector schemas (#2371, @xzyfer)
  * Fix null pointer dereference when parsing selector schemas (#2371, @2372)
  * Fix .editorconfig (#2380, @brucek)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix segfault when extending pseudo selectors failed (#2366, @mgreter)
  * Fix parser for urls looking like ruleset selectors (#2376, @mgreter)
  * Fix use of non-portable std::to_string (#2385, @mgreter)
  * Fix use of non-portable strdup (#2459, @asottile)
  * Fix unary slash expressions (#2349 #2384, @mgreter)
  * Fix missing error for trailing comma in selector list (#2365, @mgreter)
  * Fix selector and binominal look ahead (#2346, @mgreter)
  * Fix hex escape handling in interpolation (#2320, @mgreter)
  * Fix wrong parsing of calc functions as number units (#2382, @mgreter)
  * Fix incorrect comment evaluation for compressed output (#2359, @mgreter)
  * Fix parent selector handling in selector schema (#2358, @mgreter)
  * Fix parameter vararg and keyword handling (#2394, @mgreter)
  * Fix a few minor memory leaks (#2400, @mgreter)
  * Fix issue with invalid error indicator (#2404, @mgreter)
  * Fix selector parsing and url regression (#2429, @mgreter)
  * Fix null ptr segv on invalid vararg (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector append edge-case (#2437, @mgreter)
  * Fix ref-counted value handling in if function (#2437, @mgreter)
  * Fix segfault in at-root cssize edge-case (#2439, @mgreter)
  * Fix file content malloc to avoid reading beyond buffer (#2440, @mgreter)
  * Fix case-sensitive lookup to named color map (#2462, @asottile)
  * Fix shebang for tap-driver (#2466, @naroga)
  * Fix segfault in parser edge case (#2446, @mgreter)
  * Fix memory corruption on error in parse_selector_schema (#2484, @mgreter)
  * Fix autoconf path for sassc tester (#2492, @mgreter)
  * Fix output of invisible @support blocks (#2488, @mgreter)
  * Fix to_value for bracketed lists (#2467, @mgreter)
  * Fix propagation of named rest arguments (#2480, @mgreter)
  * Fix @extend of wrapped selectors (#2468, @mgreter)
  * Fix wrapped pseudo selector handling (#2464 #2383, @mgreter)
  * Fix minor issue with attribute selector unification (#2053, @mgreter)
  * Fix issue when passing restargs to call (#2472, @mgreter)
  * Fix compressing of colors in selectors (#2232, @mgreter)
  * Fix missing error on selector with invalid quote mark (#2082, @mgreter)
  * Fix travis-ci mac OSX builds (#2527, @mgreter)
  * Fix endless loop comparing Selector_List to List (#2516 #2517, @mgreter)
  * Fix SmartOS/Solaris build regression (#2519, @mgreter)
  * Fix to connect parent selector only once (#2520, @mgreter)
  * Fix whitespace issue for wrapped selectors (#2366, @mgreter)
  * Fix missing error if cwd goes missing (#2513, @mgreter)
  * Fix missing error when mixin ruleset in root has parent selector (#2482, @mgreter)
  * Fix sourcemap crutch once again (#2312, @mgreter)
  * Fix parser state column following static values (#2542, @mgreter)
  * Fix error indicator not being Unicode aware (#2404, @mgreter)
  * Fix error sourcemaps not being fully Unicode aware (#2319, @mgreter)
  * Fix some compiler warnings (#2547, @mgreter)
  * Fix math with multiple units (#2549, @mgreter)
  * Fix css test for interpolated numbers (#2560, @mgreter)
  * Fix null pointer access in nesting check (sass/sassc#222 sass/sassc#223, @mgreter)
  * Fix @else possibly producing invalid output (#2569, @xzyfer)
  * Fix parsing of @supports declarations (#2452, @xzyfer)</changelog>
  <changelog author="gutaper@gmail.com" date="1524484800">- Update version to 3.5.3:
  Community:
  * Add nim-sass to implementations list (@zacharycarter, #2592)
  * Add Haskell bindings to implementations list (@jakubfijalkowski, #2612)
  * Add SharpScss and LibSassHost bindings to implementations list (@tompazourek, #2623)
  * Update node-sass link in implementations list (@xzyfer, b866ad5)
  * Update Unicode doc after forcing UTF8/plain ASCII (@mgreter, #2596)
  * Update compatibility section of the read me (@xzyfer, 9266d26)
  Features:
  * Update sass2scss@v1.1.2 (@mgreter, #2602)
  * Emit transparent colours as rgba(0, 0, 0, 0) (@xzyfer, #2298)
  * Add a sass_option_push_import_extension C-API (@xzyfer, #1964)
  Fixes:
  * Fix output/error for modulo zero operation (@mgreter, #2593)
  * Fix automake build if sassc is missing (@mgreter, #2601)
  * Fix handling of colours in @at directives (@mgreter, #2360)
  * Fix edge case converting achromatic colors to HSL (@mgreter, #2604)
  * Fix evaluation of arithmetic inside interpolation (@mgreter, #2203)
  * Fix handling of @important in custom properties (@xzyfer, #2590)
  * Fix duplicate definition of out_of_memory macro (@thatguystone, #2619)
  * Fix merging of nested media queries with negation (@xzyfer, #2425)
  * Fix regression in parsing selector with trailing escaped colon (@xzyfer, #2625)
  * Fix segfault on empty custom properties (@xzyfer, sass/sassc#225)
- Includes changes from 3.5.1:
  Features:
  * Implement more detailed backtraces (@mgreter, #2573)
  Fixes:
  * Fix parsing of block comments to ignore css string rules (@mgreter, #1294)
  * Fix win UNC path handling for dot and dotdot directories (@mgreter, #2588)</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1562932800">- Update version to 3.6.1:
  * Fix use-after-free vulnerability in sass_context.cpp:handle_error
    bsc#1096894, CVE-2018-11499
  * Disallow parent selector in selector_fns arguments
    bsc#1118301, CVE-2018-19797
  * Fix use-after-free vulnerability exists in the SharedPtr class
    bsc#1118346, CVE-2018-19827
  * Fix stack-overflow in Eval::operator()
    bsc#1118348, CVE-2018-19837
  * Fix stack-overflow at IMPLEMENT_AST_OPERATORS expansion
    bsc#1118349, CVE-2018-19838
  * Fix buffer-overflow (OOB read) against some invalid input
    bsc#1118351, CVE-2018-19839
  * Fix Null pointer dereference in Sass::Eval::operator()(Sass::Supports_Operator*)
    bsc#1119789, CVE-2018-20190
  * Fix heap-buffer-overflow in Sass::Prelexer::parenthese_scope(char const*)
    bsc#1121943, CVE-2019-6283
  * Fix heap-based buffer over-read exists in Sass:Prelexer:alternatives
    bsc#1121944, CVE-2019-6284
  * Fix heap-based buffer over-read exists in Sass:Prelexer:skip_over_scopes
    bsc#1121945, CVE-2019-6286
  * Fix uncontrolled recursion in Sass:Parser:parse_css_variable_value
    bsc#1133200, CVE-2018-20821
  * Fix stack-overflow at Sass::Inspect::operator()
    bsc#1133201, CVE-2018-20822</changelog>
</package>
<package pkgid="e98c0e9917d6245b940ef1241db6a868dc44ecf57de156c9004f90c4961d70aa" name="libsass-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp151.3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
  <changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
  <changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
  <changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
  <changelog author="ronisbr@gmail.com" date="1479902400">- Run spec-cleaner.
- Remove unecessary `BuildRoot` in .spec.
- Remove two non-breaking spaces in .spec that were leading to
  a rpmlint warning.
- Version bump to 3.3.6.
  Upstream changelog:
  Version 3.3.6
  - ------------
  * Feature
  - Expose the Sass language version via the C API
    (@chriseppstein, #2021)
  * Fixes
  - Incorrectly erring on comments in at-rules (@mgreter, #1233)
  - Incorrectly dropping internal state of AST nodes (@mgreter,
    [#1661])
  - Incorrectly parsing the calc function (@mgreter, #1706)
  - Segfault during error handling (@mgreter, #2016)
  - Incorrectly identifying the selectors with type-of (@mgreter,
    [#2020])
  - Incorrectly erring on ID selectors starting with a number
    (@mgreter, @2023)
  - Producing incorrect output when compile with MSVC (@mgreter,
    [#2039])
  - Various segfaults and incorrect output from @extend
    (@mgreter, #2017 #2031)
  Version 3.3.5
  - ------------
  * Expose our memory allocator
    This feature has taken many proposed forms over the last 4
    months. After much patent and considered discussion by @am11
    @mgreter @saper and @xoofx you can now access our memory
    allocator on the C-API.
    void* sass_alloc_memory(size_t size)
    char* sass_copy_c_string(const char* str)
    void sass_free_memory(void* ptr)
  * Features
  - Re-add sass_option_push_include_path and
    sass_option_push_plugin_path (@xoofx, #1974)
  * Build
  - Enable address sanitizer for clang (@mgreter, #2003)
  - MSVC assert too strict (@mgreter, #1985)
  - Update Sass spec (@xzyfer, 1967)
  * Fixes
  - Incorrectly erring on @extend and @media (@mgreter, #2009
    [#2007], #1927, #1923)
  - Incorrectly erring on @extend and interpolated selectors
    (@mgreter, #2000)
  - Builds not failing when Sass spec fails to load (@saper,
    [#1997])
  - Incorrectly erring on Sass comments in selectors (@mgreter,
    [#1996])
  - Incorrectly erring on @extend and interpolated selectors with
    the !optional flag (@mgreter, #1993)
  - Incorrectly treating 0 and false as the same value when used
    as map keys (@mgreter, #1991)
  - Incorrectly erring on escaped and unicode selectors
    (@mgreter, #1977)
  - Incorrectly rendering @extend and @supports (@mgreter, #1971)
  - Incorrectly erring on functions beginning with calc
    (@mgreter, #1969)
  - Incorrectly quoting interpolated strings in selectors
    (@mgreter, #1947)
  - Incorrectly escaped escaped strings in selectors (@mgreter,
    [#1945])
  - Incorrectly duplicating executing of function in interpolated
    string (@mgreter, #1944)
  - Prevent parsing url() resulting in an endless loop (@mgreter,
    [#1931])
  - Compilation error with using -DDEBUG flag (@tony, #1917)
  - Incorrectly removing @media blocks that contain only CSS
    comments (@mgreter, #1889)
  - Better handling of / in function arguments (@mgreter, #1417)
  Version 3.3.4
  - ------------
  * Fixes
  - Inconsistent error message produced when nesting functions
    and mixins (@xzyfer, #1941)
  - Ensure custom importers are executed for all @imports
    (@xzyfer, #1935)
  - Ensure custom importers are executed in the correct order
    (@xzyfer, #1921)
  - Possible segfault when generating sourcemaps (@usta, #1920)
  - Memory leak (@usta, #1919)
  - Unused variable warning (@xzyfer, #1918)
  - Segfaulting when @extending an undefined selector (@mgreter,
    [#1916])
  - Incorrectly erring when @extending inside a mixin (@xzyfer,
    [#1915])
  - Handle signed char when considering @charset (@asottile,
    [#1914])
  - New link to sassc-ruby in documentation (@itkrt2y, #1910)
  - Incorrectly quoting interpolated strings join with +
    (@mgreter, #1907)
  - Incorrectly erring when using &amp; and interpolation together
    (@xzyfer, #1904)
  - Incorrectly duplicating nested pseudo selectors (@mgreter,
    [#1901])
  - Unused function breaking breaking unity builds (@drewwells,
    [#1896])
  - Segfaulting when url() is empty (@xzyfer, #1886)
  - Should error when &amp; is used without a parent selector
    (@xzyfer, #1644)
  Version 3.3.3
  - ------------
  * Parser and rendering refactorings
    LibSass is now able to use stringification functions for its
    internal AST objects whenever its needed. Previously this was
    only possible when we had access to a context instance, which
    sometimes made it impossible to invoke the right code path.
    This tight coupling has been factored out and we can now use
    these more freely to get our output even closer to ruby sass.
    Parser now supports multiple operations without parentheses (a
    &gt; b == c) correctly and an extensive generated test suite for
    &gt; this feature was added to sass-spec.
  * Full support for variable arguments
    Since the introduction variable arguments in Sass 3.3 LibSass
    has been playing whack-a-mole with bug fixes. As of this
    release we should have argument handling compatible with the
    latest stable Ruby Sass. Thanks to @davidkpiano for his many
    detailed bug reports and his fantastic sassdash library whose
    extensive test suite helped make this possible.
  * Lots of bug-fixes
    There were two weeks of ongoing bug slaughtering by @mgreter
    after new-years eve, which resulted in over 80 closed issues
    (there are 117 closed github issues in total for this release).
    @xzyfer also had a good streak with 14 closed issues. Special
    thanks to @ksmadsen for his c++11 random_device fix.  Also a
    big thanks for our continuing contributors @am11 and @saper for
    their inputs, feedback and pull requests.
  - Ensure we keep around memory for parser source (@mgreter,
    [#1884])
  - Avoid wrong error due to misused map object in At_Rule
    (@mgreter, #1881)
  - Implement css linefeed \a handling better (@mgreter, #1880)
  - Improve parsing for complex number units (@mgreter, #1879)
  - Fix potential issue with wrong std container usage (@mgreter,
    [#1878])
  - Improve parsing for complex number units (@mgreter, #1877)
  - Improve operating on numbers with complex units (@mgreter,
    [#1876])
  - Make generating source excerpt on error unicode aware
    (@mgreter, #1875)
  - Improve error handling API (always return formatted json)
    (@mgreter, #1874)
  - Improve identifier schema to include variables (@mgreter,
    [#1872])
  - Disable error check for extend placement check (@mgreter,
    [#1870])
  - Improve pseudo selector parsing (@mgreter, #1864)
  - Fix each iteration over selector lists (@mgreter, #1863)
  - Use to_sass for @debug, @warn and @error message (@mgreter,
    [#1862])
  - Improve lower/upper boundary check error in for loop
    (@mgreter, #1861)
  - Implement incompatible unit test for interpolation in eval
    (@mgreter, #1860)
  - Implement correct empty list to_sass output (@mgreter, #1859)
  - Remove To_String by using AST-&gt;to_string and inspect
    (@mgreter, #1858)
  - Update license year range to 2016 (@pra85, #1857)
  - Incorrect 'Invalid UTF-8' error with a specific input length
    (@mgreter, #1856)
  - Adds include headers to VS meta files on windows (@am11,
    [#1850])
  - Implement missing error checks (@mgreter, #1848)
  - Fix SmartOS compilation once and for all (@mgreter, #1847)
  - Relative imports fail when outside working directory
    (@mgreter, #1846)
  - Disable error for empty source string on context (@mgreter,
    [#1845])
  - Fix expression parsing with comment between factors
    (@mgreter, #1844)
  - Refactor/milestone 3.4 (@mgreter, #1841)
  - @custom-media throws error (@mgreter, #1839)
  - Fix iterating over parent selector list with @each (@mgreter,
    [#1837])
  - Include unconditionally (@saper, #1835)
  - No file information for empty source string (@mgreter, #1834)
  - Improve parsing of media queries with comments (@mgreter,
    [#1833])
  - Prevent segfault with nested properties edge case (@mgreter,
    [#1832])
  - Implement extend for wrapped selectors (@mgreter, #1831)
  - Only parse interpolations in kept block comments (@mgreter,
    [#1830])
  - Implement import recursion check (@mgreter, #1829)
  - Error on invalid parent selector placements (@mgreter, #1828)
  - Fix look-ahead of parent selector with trailing BEM separator
    (@mgreter, #1827)
  - Fix join_paths when left path is not canonical (@mgreter,
    [#1826])
  - Error incorrectly thrown for &amp;__ selector (@mgreter, #1825)
  - Update .editorconfig (@numeraltwo, #1824)
  - Ampersand glued to the selector should be rejected (@mgreter,
    [#1822])
  - Selector-unify should return null instead of an empty list
    (@xzyfer, #1819, #1820)
  - Fix interpolations returning quoted string in selectors
    (@xzyfer, #1818)
  - Adds CRLF awareness to Util::quote() (@am11, #1817)
  - Fix multiple issues with function parameter binding (@xzyfer,
    [#1815])
  - While loops should release their local env when exiting early
    (@xzyfer, #1814)
  - Regression in variable scoping causing segfault (@xzyfer,
    [#1813])
  - Incorrect output for unknown at-rules (@mgreter, #1812)
  - Emit DLL which exports symbols on windows VS (@am11, #1811)
  - Add exit code for explicit test (@am11, #1810)
  - Support multiline url declarations (@xzyfer, #1809)
  - Incompatible units error in interpolations (@mgreter, #1804)
  - Segfault on missing semicolon (@mgreter, #1803)
  - Infinite import loop results in a stack overflow (@mgreter,
    [#1801])
  - Segmentation fault for interpolations in certain comments
    (@mgreter, #1798)
  - Placeholder selector inside :not() (@mgreter, #1797)
  - Append function doesn't appear to append correctly inside
    loops (@mgreter, #1796)
  - Media queries fail to parse when comment is present
    (@mgreter, #1794)
  - Incompatible units error for expressions in media queries
    (@mgreter, #1793)
  - Incorrectly building dynamic library on Windows (@mgreter,
    [#1790])
  - Fix libsass build for SmartOS (@mgreter, #1782)
  - Fix-up some docs on importers (undefined variables)
    (@asottile, #1780)
  - Using 'calc' shoes an Error: Incompatible units: 'px' and '%'
    (@mgreter, #1776)
  - Converts wchar_t* to UTF-8 std::string on windows (@am11,
    [#1774])
  - String Interpolation incorrectly quotes parent selectors
    (@xzyfer, #1770)
  - @debug on an empty list should produce () (@mgreter, #1768)
  - Removing duplicated content from c api example (@rodneyrehm,
    [#1767])
  - Comments between binary operands prevents evaluation
    (@mgreter, #1765)
  - Add crutch to help browsers interpreting source-maps
    (@mgreter, #1759)
  - bug with &amp; (parent-selector) and @each directive in 3.3.2
    (@mgreter, #1757)
  - Fix possible segfault in Each expansion (@mgreter, #1756)
  - Remove sixtuplet flag on Colors and fix edge case (@mgreter,
    [#1755])
  - Refactor to remove Context dependency from To_String
    (@mgreter, #1754)
  - Segmentation fault @each with argslist node-sass 3.4.2
    (@mgreter, #1752)
  - Wrong line reported in invalid operands for multiplication
    (@mgreter, #1751)
  - Implement variable shadow scoping (@mgreter, #1748)
  - Nested styles refer to top-level parent in source-map line
    number (@mgreter, #1747)
  - Variables in control flow should not be accessible in outer
    scopes (@mgreter, #1746)
  - Fix #1742 - same expression on both sides of &amp;&amp; (@saper,
    [#1744])
  - Don't allocate std::random_device statically (@ksmadsen,
    [#1743])
  - Ampersands in :not selector (@mgreter, #1741)
  - Improve binary expressions to preserve white-space at
    operands (@mgreter, #1739)
  - Defer creation of hash maps into eval stage (@mgreter, #1736)
  - Fix edge-case for extend with Wrapped_Selector (@mgreter,
    [#1735])
  - Interpolated, double-quoted vars can produce an empty output
    (@mgreter, #1734)
  - Fix error messages for min and max (@xzyfer, #1731)
  - Multiple nth-child selector with @extend compiles wrong
    (@mgreter, #1729)
  - Fix Binary operators adjacent to interpolations (@mgreter,
    [#1728])
  - Allow multiple unparenthesized expressions for operators
    (@mgreter, #1727)
  - Error: Import may not be used within controls or mixins. $100
  - Different results with @each and @for loop (@mgreter, #1723)
  - Extra white-space after "#{}" interpolation (@mgreter, #1722)
  - Fixes for Windows version (@Taritsyn, #1721)
  - @each on nested lists assigns the wrong value. (@mgreter,
    [#1709])
  - Avoid some clang compiler warnings (@mgreter, #1707)
  - Implement rounding precision (@mgreter, #1704)
  - No error for @extend %an-undefined-placeholder (@mgreter,
    [#1670])
  - Error on @debug, @warn or @error in properties (@mgreter,
    [#1653])
  - Improve selector look-ahead for "negative" binomials
    (@mgreter, #1652)
  - @extend inside @at-root doesn't work (@mgreter, #1651)
  - Space in argument for :nth-of-type(2n - 1) results in error
    (@mgreter, #1650)
  - All interpolation is unquoted (@xzyfer, #1647)
  - Arglist as single arg for varargs improperly gets destructed
    (@xzyfer, #1645)
  - Use the correct parsing semantics for @import url() (@xzyfer,
    [#1597])
  - Single comma separated must be surrounded by () on inspect.
    (@mgreter, #1583)
  - Error message mismatch for empty interpolation as an argument
    (@mgreter, #1564)
  - Error message mismatch for min (@xzyfer, #1559)
  - Disallow functions to be defined in control directives or
    mixins (@mgreter, #1550)
  - Minor issue parsing number units after double dash (@mgreter,
    [#1526])
  - Fixes some clang warnings (@mgreter, #1523)
  - Better support for @-moz-document (@mgreter, #1401)
  - Quoted colors in maps produces 'Duplicate key "transparent"
    in map' (@mgreter, #1169)
  - Permit multiline in URL (@xzyfer, #1096)
  - No error for missing imported base class in @extend
    (@mgreter, #871)
  * Improved spec tests
    With this release we have a bit more than 275 new spec tests.
    We started to include error tests too, which was quite
    difficult at the beginning, since we need to get the output
    100% correct to really pass a spec test, although we really
    only test the first line for error specs so far. None the less,
    with this release a lot more error messages are matching the
    ones of ruby sass and we also catch more cases. But we still
    let a lot more syntax silently pass than ruby sass does.</changelog>
  <changelog author="jengelh@inai.de" date="1479988800">- Redo descriptions and RPM groups</changelog>
  <changelog author="ronisbr@gmail.com" date="1486987200">- Run spec-cleaner.
- Version bump to 3.4.3.
  Upstream changelog:
  Version 3.4.3
  - ------------
  * Fixes
  - Fix segfault when comparing pseudo selectors (@xzyfer, #2289)
  - Fix thread-safety for mixin recursions check (@mgreter,
    [#2286])
  - Fix false parser errors (@xzyfer, #2095)
  - Fix bad source mappings for interpolated selectors (@mgreter,
    [#2224])
  - Fix not erring when encountering bad interpolations
    (@mgreter, #2081)
  - Fix some error messages to match Ruby Sass (@mgreter, #2267)
  Version 3.4.2
  - ------------
  * Features
  - Sass 3.4.23: Support url() with quotes in unknown directives
    (@mgreter, #2243)
  * Fixes
  - Test bootstrap ignoring SASS_SPEC_PATH and SASS_SASSC_PATH
    environment variables (@xzyfer, #2265)
  - Incorrect equality of interpolated values (@mgreter, #2261)
  - Incorrect error when @content is inside @at-root (@mgreter,
    [#2260])
  - C-API copy_options function losing some options (@mgreter,
    [#2257])
  - Segfault with calling calc (@mgreter, @xzyfer)
  Version 3.4.1
  - ------------
  * Fixes
  - Incorrect @extend with interpolated selectors in @at-root
    (@mgreter, #2246)
  - Incorrect dp unit conversions (@nex3, sass/sass#2143)
  - Incorrect str-slice behaviour with $end-at is negative
    (@xzyfer, #2240 sass/sass#2211)
  Version 3.4.0
  - ------------
  Over the last couple years we've worked very closely with the
  Ruby Sass team to reach Sass 3.4 compatibility.
  It's become clear that need to draw a line in sand with exactly
  how exactly we can match Sass 3.4, especially in the face of
  changes in Sass 3.5.
  With this release the LibSass team is marking the completion of
  active development on Sass 3.4 compatibility. From today we'll
  focus our efforts on Sass 3.5 compatibility, first prioritising
  CSS compatibility features like support for CSS custom property
  and CSS grids.  Improves to @at-root
  @at-root has mostly worked since it's introduction to LibSass but
  there have always been issue when it was combined with conditions
  (like @if) or mixins.  These issues were due to a fundamental
  difference in the LibSass implementation.  The difference has
  been addressed, so @at-root is now fully supported.
  You can read more about the specifics of this issue in #2089
  - Implement the Trace AST node (@xzyfer, #1585)
  - Remove the selector stack from the CSSize visitor (@xzyfer,
    [#2091])
  - Workaround parent selector issues with at-root (@xzyfer,
    [#2006] #2198)
  * Delayed Values
  Knowing when to evaluate a string, function, do concatenation, or
  perform math is a complicated problem with many edge cases.
  @mgreter has continued his work on improving the accuracy of
  these decisions.
  - Significant improvements to delayed values (@mgreter, #2042,
    [#2034] #2057)
  - / interpreted as division instead of separator (@mgreter,
    [#2149])
  - Mishandling quotes (@mgreter, #2153 #2156)
  * Continued improvements to @extend
  @extend is hard. With every release we get better at it and this
  release is no exception.
  - Extending inner of :not can lead to invalid css (@mgreter,
    [#2054])
  - Segfault with @extend (@mgreter, #2051)
  - Extending a placeholder from a media query outputs nothing
    (@mgreter, #2150)
  - Don't drop pseudo elements in wrapped selectors (@xzyfer,
    [#2200])
  * Memory improvments
  @mgreter has done some great work on improving our memory usage
  when dealing with large maps, and lists. He's not done yet, keep
  your eyes peeled for further improvments in upcomming releases.
  - Improve memory footprint when evaluating in loops (@mgreter,
    [#2171])
  * Support list functions on maps
  Implementing Sass maps was my first major contribution to
  LibSass. A couple year later I can finally all the job complete
  with support for maps in list functions.
  - Support list functions on maps (@xzyfer, #1930)
  * Sourcemaps
  @mgreter and @nschonni have made some significant improvements to
  our sourcemaps. You can read more about the specifics in the bug
  links below.
  - Bugfixes for source maps (@mgreter, #2216)
  * Fixes parent selector mappings
  * Fixes media block/query mappings
  * Fixes range over binary expressions
  * Don't include semicolon for statics
  * Fixes variable assignment mappings
  - Make paths in source comments relative to CWD (@mgreter,
    [#2219])
  - Implement source_map_file_urls option (@mgreter, #2220)
  - Re-order the sourcemap writing to match spec (@nschonni,
    [#2193])
  * Features
  - Improve debugger coverage (@xzyfer, #2093)
  - Add Sass lang version to 3.4 (@am11, #2077)
  - Automake compile on msys2 and mingw64 (@mgreter, #2063)
  - Improve Sass_Value documentation (@mgreter, #2045)
  - Add initial CONTRIBUTING.md and ISSUE_TEMPLATE.md (@mgreter,
    [#2044])
  - Update sass2scss to latest version (@mgreter, #2177 #1990
    [#1781])
  - Implement the check nesting visitor (@xzyfer, #2062)
  * Fixes
  - color-change() with $hue (@mgreter, #2113)
  - @import causing process to hang (@mgreter, #2106)
  - Broken link (@MoritzKn, #2105)
  - Specificity for Simple_Selectors nodes (@xzyfer, #2099)
  - @at-root without arguments (@xzyfer, #2092)
  - Segfault with calc prefix and underscore vs hyphen (@mgreter,
    [#2074])
  - Error message for missing arguments (@mgreter, #2067)
  - Warning under MSVC x86_64 (@asottile, #2047)
  - MSVC x86_64 buffer overrun in error reporting (@mgreter,
    [#2046])
  - Handling "\a" in interpolations (@mgreter, #1786)
  - Including a @mixin when outside of selector still outputs
    properties (@xzyfer, #1732)
  - Add error when comma lists are used as map keys (@mgreter,
    [#1537])
  - Evaluation of &amp; in sass script (@mgreter, #2124 #2116)
  - Handle unicode chars in unquoted urls (@mgreter, #2120
    @xzyfer, #2125)
  - hue() for rgb colors when $saturation: 0 (@mgreter, #2135)
  - Invalid duplicate keys in maps (@mgreter, #2118)
  - str-slice() with negative length (@mgreter, #2132)
  - Segfault parsing multiple operations in calc (@mgreter,
    [#2151])
  - Stackoverflow and segmentation failure on recrusive
    dependence mixins (@mgreter, #2144)
  - Don't allow math on maps (@mgreter, #2147)
  - Don't allow math on colors (@xzyfer, #2140)
  - CSS comment inside of @supports incorrect CSS output
    (@mgreter, #2158)
  - Check and error on empty variable assignments (@mgreter,
    [#2143] #2146)
  - Incorrect output when concatenating an empty string
    (@mgreter, #2169)
  - Brew 1.0.0 release causing OSX CI failures (@xzyfer, #2183)
  - Handling empty nested media queries (@xzyfer, #2154)
  - @at-root for loop and logic statements (@mgreter, #2187)
  - Typo in docs (@asottile, @2201)
  - Memory leak (@mgreter, #2211 #2213)
  - Using ... in an overloaded function causes fatal error
    (@mgreter, #2205)
  - Should error when attempting to output an empty list or map
    (@mgreter, #1452)
  - Don't error when an @import is terminated by the end of the
    block (@xzyfer, #2233)
  - Fix modulo operation (@mgreter, #2236)
  * Misc
  - Rename some selector AST nodes to better match the reference
    (@xzyfer, #2101)
  - Add php wrapper project link (@lesstif, #2121)
  - Add Elixir wrapper project link (@scottdavis, #2141)
  - Updated README (@am11, #2172)
  - Enabling debug builds by setting env var DEBUG=1
    (@delapuente, #2176)
  - Remove -ldl flag from OpenBSD too (@parhs, #2210)
  - Remove superfluous dev error message (@mgreter, #2217)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Version bump to 3.4.6.
  Upstream changelog:
  Version 3.4.5
  - ------------
  * Features
  - Implement trailing commas in parameters and arguments (@xzyfer,
    [#2288])
  - Implement unary slash expressions (@mgreter, #2349 and #2384)
  * Fixes
  - Fix Attribute Selector equal compare operator (@mgreter, #2350)
  - Fix segfault for varargs with non-string keys (@mgreter, #2352)
  - Fix Element Selector compare operators (@mgreter, #2347)
  - Fix compiler issue with spec regression on NetBSD 6.1 (@mgreter,
    [#2357])
  - Fix some segfaults caused by the parser being too forgiving
    (@xzyfer, #2367)
  - Fix segfault with invalid map keys (@xzyfer, #2368)
  - Fix null pointer dereference in css_error (@xzyfer, #2370)
  - Fix bug when parsing selector schemas (@xzyfer, #2371)
  - Fix null pointer dereference in parse_selector_schema (@xzyfer,
    [#2372])
  - Fix segfault when extending pseudo selectors failed (@mgreter,
    [#2366])
  - Fix parser for urls looking like ruleset selectors (@mgreter,
    [#2376])
  - Error for trailing rulesets comma (@mgreter, #2365)
  - Improve selector and binominal look ahead (@mgreter, #2346)
  - Improve hex escape handling in interpolation (@mgreter, #2320)
  - Fix wrong parsing of calc functions as number units (@mgreter,
    [#2382])
  - Skip comment evaluation for compressed output (@mgreter, #2359)
  - Improve parent selector handling in selector schema (@mgreter,
    [#2358])
  - Improve parameter vararg and keyword handling (@mgreter, #2394)
  - Hotfix to avoid invalid nested :not selectors (@mgreter, #2399)
  - Fix a few minor memory leaks (@mgreter, #2400)
  Version 3.4.4
  - ------------
  * Features
  - Update Visual Studio build facade (@am11, #2288)
  - Update read me (@mgreter, #2310)
  - Performance improvements for @extend (@mgreter, #2314)
  - Performance improvements (@mgreter, #2339)
  * Fixes
  - Disable FMA3 when compiling with Visual Studio 2013 (@am11,
    sass/node-sass#1854)
  - Fix for loop variable to be referenced (@mgreter, #2330)
  - Fix number compare issues when used as map keys with old gcc
    (@mgreter, #2331)
  - Fix results of map-get not being evaluated (@mgreter, #2309)
  - Fix null pointer access (@mgreter, sass/node-sass#1880)
  - Fix null pointer access (@mgreter, #2321)
  - Fix bug with media queries and @extend (@mgreter, #2341)
  * Misc
  - Cleanup initial shared ptr interface (@mgreter, #2299)
  - Refactor selector list and schema handling (@mgreter, #2300)
  - Cleanup context usage and extend code (#2313)
  - Cleanup misc (#2316, @nschonni)
  - Cleanup issues detected by clangs static analyser (#2336,
    @xzyfer)
  - Remove Textual intermediate AST node (@mgreter, #2338)
  - Add libsass-python to README (@asottile, #2340)</changelog>
  <changelog author="astieger@suse.com" date="1520596800">- update to 3.4.9:
  * Fix math with multiple units
  * Make error indicator Unicode aware
  * Make sourcemaps fully Unicode aware
  * Fix parser state column following static values
  * Fix memory leak of custom functions signature
  * Adding the missing scope identifier std::
  * Fix fall-trough warning in latest gnu gcc
  * Tweak warning message format
- includes changes frpm 3.4.8:
  * Implement case modifier for attribute selector
  * Emit warning for double parent selectors
  * Throw error if cwd goes missing
  * Throw error when mixin ruleset in root has parent selector
  * Fix to connect parent selector only once
  * Fix endless loop comparing Selector_List to List
  * Fix whitespace issue for wrapped selectors
- includes changes from 3.4.7:
  * Implement exponents for numbers
  * Implement long file path suppo
  * Error on quoted string in simple selector parsing
  * Do not compress colors in selectors
  * Fix issue when passing restargs to call
  * Fix issue with attribute selector unification
  * Improve wrapped pseudo selector handling
  * Improve extend of wrapped pseudo selectors
  * Fix propagation of named rest arguments
  * Do not output invisible support blocks
  * Various build makefile and CI related fixes
- 3.4.6:
  * Reverts accidental 3.5 feature - trailing commas in parameters
    and arguments
  * Reverts accidental breaking change - remove current working
    directory from search paths
  * Fix some memory corruptions
  * Fix CI instability
  * Fix CI for 3.4 release
  * Fix links in Markdown after Github changed its parser
  * Fix potential stack overflow
  * Fix file content malloc to avoid reading beyond buffer
  * Fix segfault in at-root cssize edge-case
  * Fix ref-counted value handling in if function
  * Fix segfault in selector append edge-case
  * Fix segfault in parser edge case
  * Fix usage of non-portable strdup
  * Fix case-sensitive lookup to parse colors
  * Fix selector parsing and url regression
- Use %license (boo#1082318)</changelog>
  <changelog author="gutaper@gmail.com" date="1521201600">- Update version to 3.5.1:
  Community:
  * Add sass.cr to implementations list (@straight-shoota, #2574)
  Fixes:
  * Fix compiler warnings (@mgreter, #2575)
  * Fix double free when run in concurrent processes (@mgreter, #2579)
  * Fix units sometimes being dropped in math operations (@mgreter, #2582)
  * Fix missing error for mixins defined within mixins (@mgreter, #2558)
- Includes changes from 3.5.0:
  Features:
  * Implement trailing commas in parameters and arguments (#2070, @xzyfer)
  * Implement deprecation warning for ID strings that look like colors (#2302, @xzyfer)
  * Implement content-exists function (#2266, @xzyfer)
  * Implement support for passing var() to CSS functions (#2244, @xzyfer)
  * Implement first class functions (#2277 #2275, @xzyfer)
  * Implement nesting guard to avoid "out of stack space" (#2438, @mgreter)
  * Implement exponents for numbers (#2465, @mgreter)
  * Implement long file path support for Windows (#2477, @mgreter)
  * Implement case modifier for attribute selector (#2509, @mgreter)
  * Implement warning for double parent selectors (#2522, @mgreter)
  * Implement support for custom property syntax (#2076, @xzyfer)
  * Implement support for custom-property feature flag (#2076, @xzyfer)
  Optimisations:
  * Performance improvements (#2339, @mgreter)
  * Fix memory leak by removing previously unused code (#2505, @mgreter)
  * Fix memory leak of custom functions signature (#2553, @mgreter)
  Community:
  * Add libsass-python to Readme (#2546, @asottile)
  * Update link to go-libsass (#2340 #2410, @drewwells)
  Fixes:
  * Fix media query stack and eval issue (#2341, @mgreter)
  * Fix Attribute Selector equal compare operator (#2347, @mgreter)
  * Fix segfault for varargs with non-string keys (#2352, @mgreter)
  * Fix Element Selector compare operators (#2347, @mgreter)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix some segfaults caused by the parser being too forgiving (#2367, @xzyfer)
  * Fix segfault with invalid map keys (#2368, @xzyfer)
  * Fix null pointer dereference in css_error (#2369, @xzyfer)
  * Fix bug when parsing selector schemas (#2371, @xzyfer)
  * Fix null pointer dereference when parsing selector schemas (#2371, @2372)
  * Fix .editorconfig (#2380, @brucek)
  * Fix compiler issue with spec regression on NetBSD 6.1 (#2357, @mgreter)
  * Fix segfault when extending pseudo selectors failed (#2366, @mgreter)
  * Fix parser for urls looking like ruleset selectors (#2376, @mgreter)
  * Fix use of non-portable std::to_string (#2385, @mgreter)
  * Fix use of non-portable strdup (#2459, @asottile)
  * Fix unary slash expressions (#2349 #2384, @mgreter)
  * Fix missing error for trailing comma in selector list (#2365, @mgreter)
  * Fix selector and binominal look ahead (#2346, @mgreter)
  * Fix hex escape handling in interpolation (#2320, @mgreter)
  * Fix wrong parsing of calc functions as number units (#2382, @mgreter)
  * Fix incorrect comment evaluation for compressed output (#2359, @mgreter)
  * Fix parent selector handling in selector schema (#2358, @mgreter)
  * Fix parameter vararg and keyword handling (#2394, @mgreter)
  * Fix a few minor memory leaks (#2400, @mgreter)
  * Fix issue with invalid error indicator (#2404, @mgreter)
  * Fix selector parsing and url regression (#2429, @mgreter)
  * Fix null ptr segv on invalid vararg (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector extend edge-case (#2437, @mgreter)
  * Fix segfault in selector append edge-case (#2437, @mgreter)
  * Fix ref-counted value handling in if function (#2437, @mgreter)
  * Fix segfault in at-root cssize edge-case (#2439, @mgreter)
  * Fix file content malloc to avoid reading beyond buffer (#2440, @mgreter)
  * Fix case-sensitive lookup to named color map (#2462, @asottile)
  * Fix shebang for tap-driver (#2466, @naroga)
  * Fix segfault in parser edge case (#2446, @mgreter)
  * Fix memory corruption on error in parse_selector_schema (#2484, @mgreter)
  * Fix autoconf path for sassc tester (#2492, @mgreter)
  * Fix output of invisible @support blocks (#2488, @mgreter)
  * Fix to_value for bracketed lists (#2467, @mgreter)
  * Fix propagation of named rest arguments (#2480, @mgreter)
  * Fix @extend of wrapped selectors (#2468, @mgreter)
  * Fix wrapped pseudo selector handling (#2464 #2383, @mgreter)
  * Fix minor issue with attribute selector unification (#2053, @mgreter)
  * Fix issue when passing restargs to call (#2472, @mgreter)
  * Fix compressing of colors in selectors (#2232, @mgreter)
  * Fix missing error on selector with invalid quote mark (#2082, @mgreter)
  * Fix travis-ci mac OSX builds (#2527, @mgreter)
  * Fix endless loop comparing Selector_List to List (#2516 #2517, @mgreter)
  * Fix SmartOS/Solaris build regression (#2519, @mgreter)
  * Fix to connect parent selector only once (#2520, @mgreter)
  * Fix whitespace issue for wrapped selectors (#2366, @mgreter)
  * Fix missing error if cwd goes missing (#2513, @mgreter)
  * Fix missing error when mixin ruleset in root has parent selector (#2482, @mgreter)
  * Fix sourcemap crutch once again (#2312, @mgreter)
  * Fix parser state column following static values (#2542, @mgreter)
  * Fix error indicator not being Unicode aware (#2404, @mgreter)
  * Fix error sourcemaps not being fully Unicode aware (#2319, @mgreter)
  * Fix some compiler warnings (#2547, @mgreter)
  * Fix math with multiple units (#2549, @mgreter)
  * Fix css test for interpolated numbers (#2560, @mgreter)
  * Fix null pointer access in nesting check (sass/sassc#222 sass/sassc#223, @mgreter)
  * Fix @else possibly producing invalid output (#2569, @xzyfer)
  * Fix parsing of @supports declarations (#2452, @xzyfer)</changelog>
  <changelog author="gutaper@gmail.com" date="1524484800">- Update version to 3.5.3:
  Community:
  * Add nim-sass to implementations list (@zacharycarter, #2592)
  * Add Haskell bindings to implementations list (@jakubfijalkowski, #2612)
  * Add SharpScss and LibSassHost bindings to implementations list (@tompazourek, #2623)
  * Update node-sass link in implementations list (@xzyfer, b866ad5)
  * Update Unicode doc after forcing UTF8/plain ASCII (@mgreter, #2596)
  * Update compatibility section of the read me (@xzyfer, 9266d26)
  Features:
  * Update sass2scss@v1.1.2 (@mgreter, #2602)
  * Emit transparent colours as rgba(0, 0, 0, 0) (@xzyfer, #2298)
  * Add a sass_option_push_import_extension C-API (@xzyfer, #1964)
  Fixes:
  * Fix output/error for modulo zero operation (@mgreter, #2593)
  * Fix automake build if sassc is missing (@mgreter, #2601)
  * Fix handling of colours in @at directives (@mgreter, #2360)
  * Fix edge case converting achromatic colors to HSL (@mgreter, #2604)
  * Fix evaluation of arithmetic inside interpolation (@mgreter, #2203)
  * Fix handling of @important in custom properties (@xzyfer, #2590)
  * Fix duplicate definition of out_of_memory macro (@thatguystone, #2619)
  * Fix merging of nested media queries with negation (@xzyfer, #2425)
  * Fix regression in parsing selector with trailing escaped colon (@xzyfer, #2625)
  * Fix segfault on empty custom properties (@xzyfer, sass/sassc#225)
- Includes changes from 3.5.1:
  Features:
  * Implement more detailed backtraces (@mgreter, #2573)
  Fixes:
  * Fix parsing of block comments to ignore css string rules (@mgreter, #1294)
  * Fix win UNC path handling for dot and dotdot directories (@mgreter, #2588)</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1562932800">- Update version to 3.6.1:
  * Fix use-after-free vulnerability in sass_context.cpp:handle_error
    bsc#1096894, CVE-2018-11499
  * Disallow parent selector in selector_fns arguments
    bsc#1118301, CVE-2018-19797
  * Fix use-after-free vulnerability exists in the SharedPtr class
    bsc#1118346, CVE-2018-19827
  * Fix stack-overflow in Eval::operator()
    bsc#1118348, CVE-2018-19837
  * Fix stack-overflow at IMPLEMENT_AST_OPERATORS expansion
    bsc#1118349, CVE-2018-19838
  * Fix buffer-overflow (OOB read) against some invalid input
    bsc#1118351, CVE-2018-19839
  * Fix Null pointer dereference in Sass::Eval::operator()(Sass::Supports_Operator*)
    bsc#1119789, CVE-2018-20190
  * Fix heap-buffer-overflow in Sass::Prelexer::parenthese_scope(char const*)
    bsc#1121943, CVE-2019-6283
  * Fix heap-based buffer over-read exists in Sass:Prelexer:alternatives
    bsc#1121944, CVE-2019-6284
  * Fix heap-based buffer over-read exists in Sass:Prelexer:skip_over_scopes
    bsc#1121945, CVE-2019-6286
  * Fix uncontrolled recursion in Sass:Parser:parse_css_variable_value
    bsc#1133200, CVE-2018-20821
  * Fix stack-overflow at Sass::Inspect::operator()
    bsc#1133201, CVE-2018-20822</changelog>
</package>
<package pkgid="431aa9ff1045a4d08f20385f5635455ddec236c27db76963a84af64e84b61547" name="libsensors4" arch="i586">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="64d3f1868b816597e36479abe46dd4584461c360dc211f06343df22010e9c97b" name="libsensors4" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="dc43c4b66e5005902409e6515e3416d9c2bcc10f484b790ad9b69e39f59f99ee" name="libsensors4-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="824fc6746efdebad2b27abf187d471dfb38065471b77ada84cdbd641ffe06ce5" name="libsensors4-devel" arch="i586">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="7cb1c9c1404e1f532a87a66794f2c215327727602c75d5b912580d40f74afa62" name="libsensors4-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="7398e0de558340c433b08b62059d0c4fcdfe97fb47c30744bf894a157909b5c7" name="libsmbclient-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3a3ea855f511603a9f78517c6cafc935c0c5e6bbb9fe91a45a6d77922fd014e7" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f77425c4f4ef68c02cee9c5ae6fd45064ab8c0e9a703b05eb97a1c8420616e27" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b6f5a766ad7316e641fad802c08cc437bffddd5871005fbdcc9ade0adc64e666" name="libsmbclient0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="1b552f0fca1b56bd89af541ce87c3739ef8f38235d056241980c7cabfea0e2d3" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="62d07a060551a4df5f4530911e3f13ffce7d0618159af2aec60fac66b5420067" name="libsmbconf-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="d8430bc6100399bb48f66530d83a35a857d82fcb090fd767b60b8ad622428b2e" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="3c9475cc9020b7185f006f89896bf1b7a82627384f49307551502e16643c3b23" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="bdab3240b50b450012d7b39bf0b3fc2753dfce4a369da0b6eaaaecc744f32134" name="libsmbconf0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="95a4c459dd614e5c770256f859e3110306d774703cea75795bfba61a467d0c1c" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="9006b039ab9363455548577bb7ebcdd2ddfa48c3b3a6fb6104c13ef2cdc11b2e" name="libsmbldap-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0025be1410e99741bf4ac14a9b3d474a8afc47216f0f35736dcf0c5430fc4490" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="25b689b39e808d0d3860421256e1f1014910933dfde5757105c36f4aa1f4a108" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="edfba6c3f93636627c25ce8032e9b98e2824b89c4b32454c8bf7d7902a48442f" name="libsmbldap2" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="9c248b5db7f6f18cdc49d7bb93317443c43128bbbe01cdc8332e3fbb96817c39" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ab15bf80745690d05e3be2e3711e17ab1cb0e50a85709be58dfcf19ee1faf132" name="libsoftokn3" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="7179b03f057228760c23f04be1659c2f09a132cfdae5d430c0fc6b24184b9112" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="4033e2bed6c55a1a690e148255708676a01d34233b044aca8c84993d4f62ddcc" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="d592c0187790fee80cd26b9bfe75446b2faf80d01c3d021f3498c4234e6fc9ec" name="libsoftokn3-hmac" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="43e59cb04e5123df8c76c454b8d9c6fa767e1bc3314fa2b884e4d427d5affd71" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="50a470fee8a5d325950e82b3d81d412f1b0036544a941d92775f5fcdae7dde26" name="libsoftokn3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="05aa8369626550baf6db0a7bc17d4b4f44ca9bf7fb1581595055df297a0f3eb9" name="libspeechd-devel" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="c99d2717a0592efd1c1ab093a70400e8bce564c16574aad2d14b0361fba1025d" name="libspeechd-devel" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="0e3e0758f6223fd911cc9e1b737f49aae332d7875b747a3f3d0a3c4e5dc67bbd" name="libspeechd-devel" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="ed51616f98367016493e43073c9761acfc88fffb7f6387ecfdd78ad8e4b484ff" name="libspeechd-devel" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="668d0e1c797fe54e812571676394f6c8d1c9dbc76ca44765edd248dd57513304" name="libspeechd2" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="9357e8fa4dfcbc366e50523e95dda392afee1abcb9c7cf262249e66d975ebe1c" name="libspeechd2" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="d54ba51cb3f624749956aab7cb13f468ce6e3db9ed43b9217cf9cf6ceaa76b7a" name="libspeechd2" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="ee458ee6da05e7e5a8298d60b4ff598e2bc32ef821aa7d30e83fa79be3046623" name="libspeechd2" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="b2089204952bb18449f3031ae8c0a5a9ec0f6a13bf0e6d195b9b9e8ab6fc9cbe" name="libspeechd2-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="f193e3e08ea8a091da07e4f9d7246d870311c4fe453afa7e37566384bbc6c066" name="libspeechd2-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="a46548bf5b8713a3e28bf12f53d0561fc1ff4ee84ca64c319777f539e7f6a7c7" name="libssh" arch="src">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="c6fe6c4d61fdfac8e514923ce1979fc3a5c57067e59116e66d4bb8b5cbff7c1c" name="libssh-devel" arch="i586">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="c91a1ee9c87fb395888667233a5df26f0f859b905e063b24511e1a24a9c1bfd3" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="2f3702d322f47e9b1a1b301e6b2c4523b57ff95286db4b9e6aeb9a6dbf27f983" name="libssh4" arch="i586">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="e5b73a8424414caee714c9d7e549500205c033dcdd4b8ab4a49f6eb6a17af98d" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="805b4e163055e7ee48ea4e05a96b6c8379235c8e64e94692e25292e2899d3076" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="lp151.2.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1492084800">- Update to version 0.7.5
  * Fixed a memory allocation issue with buffers
  * Fixed PKI on Windows
  * Fixed some SSHv1 functions
  * Fixed config hostname expansion</changelog>
  <changelog author="astieger@suse.com" date="1501502400">- add package keyring and verify source signature</changelog>
  <changelog author="vcizek@suse.com" date="1505476800">- add support for building with OpenSSL 1.1 (bsc#1055266)
  * added patches:
  * 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
  * 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
  * 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
  * 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
  * 0001-libcrypto-Use-newer-API-for-HMAC.patch
  * 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
  * 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514116800">- Add patch to fix parsing of config files (boo#1067782):
  * 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1520596800">- Disable timeout testing on slow build systems (bsc#1084713)
  * 0001-disable-timeout-test-on-slow-buildsystems.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1533902400">- Update to version 0.8.0
  * Removed support for deprecated SSHv1 protocol
  * Added new connector API for clients
  * Added new known_hosts parsing API
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added crypto backend for mbedtls crypto library
  * Added ECDSA support with gcrypt backend
  * Added advanced client and server testing using cwrap.org
  * Added support for curve25519-sha256 alias
  * Added support for global known_hosts file
  * Added support for symbol versioning
  * Improved ssh_config parsing
  * Improved threading support
- Removed 0001-libcrypto-Remove-AES_ctr128_encrypt.patch
- Removed 0001-libcrypto-Introduce-a-libcrypto-compat-file.patch
- Removed 0001-libcrypto-Use-newer-API-for-HMAC.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_MD_CTX.patch
- Removed 0001-libcrypto-Use-a-pointer-for-EVP_CIPHER_CTX.patch
- Removed 0001-pki_crypto-Use-getters-and-setters-for-opaque-keys-a.patch
- Removed 0001-threads-Use-new-API-call-for-OpenSSL-CRYPTO-THREADID.patch
- Removed 0001-cmake-Use-configure-check-for-CRYPTO_ctr128_encrypt.patch
- Removed 0001-config-Bugfix-Dont-skip-unseen-opcodes.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1534161600">- Update to version 0.8.1
  * Fixed version number in the header
  * Fixed version number in pkg-config and cmake config
  * Fixed library initialization
  * Fixed attribute detection</changelog>
  <changelog author="asn@cryptomilk.org" date="1534248000">- Remove the libssh_threads.so symlink</changelog>
  <changelog author="vcizek@suse.com" date="1535371200">- Add missing zlib-devel dependency which was previously pulled in
  by libopenssl-devel</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1535630400">- Update to version 0.8.2
  * Added sha256 fingerprints for pubkeys
  * Improved compiler flag detection
  * Fixed race condition in reading sftp messages
  * Fixed doxygen generation and added modern style
  * Fixed library initialization on Windows
  * Fixed __bounded__ attribute detection
  * Fixed a bug in the options parser
  * Fixed documentation for new knwon_hosts API
- Added patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch
  * Fix compiler warning on SLE12</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1537531200">- Update to version 0.8.3
  * Added support for rsa-sha2
  * Added support to parse private keys in openssh container format
    (other than ed25519)
  * Added support for diffie-hellman-group18-sha512 and
    diffie-hellman-group16-sha512
  * Added ssh_get_fingerprint_hash()
  * Added ssh_pki_export_privkey_base64()
  * Added support for Match keyword in config file
  * Improved performance and reduced memory footprint for sftp
  * Fixed ecdsa publickey auth
  * Fixed reading a closed channel
  * Added support to announce posix-rename@openssh.com and
    hardlink@openssh.com in the sftp server
- Removed patch: 0001-poll-Fix-size-types-in-ssh_event_free.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1539691200">- Update to version 0.8.4
  * Fixed CVE-2018-10933; (bsc#1108020)
  * Fixed building without globbing support
  * Fixed possible memory leaks
  * Avoid SIGPIPE on sockets</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
</package>
<package pkgid="36a78c50e1d610712d0791293eb69d5dcb5f98a54f88e9cd26b7b986b1e94cd3" name="libsss_certmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="da586b8fe0df2cb50efa108beca86ff6a5f595e900ca50bcf8bd3b098b176087" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="b43ea9acd79cce3edaba74c668643ab8911d3b6b6e12c34f52cfa7f6c3eeb452" name="libsss_certmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="ba135f93829ca58de7b86d332e33223ad9915ddd633ae2e52e1435c75a64afd3" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d8ff049b97720005e4dd77fa36922fccd06e0a6a8e05ffd5fa1c26041d759e9d" name="libsss_idmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="51ae11a6ecc969c624e9feda4af94d093b7301bac721c29a53962a9c244540f0" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="b44a7342511212c7919b8fb59195bd689786a817c3d967b2d2ebe3a3ef439b92" name="libsss_idmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d52d59f87e6e9d52c08ec5ae08db1998d4b74503dcf848e69dbcedaddfd22f7d" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="4179e0b18f3a2cb62cfa8819413a859b0cc6f7da2a2aba8ad81c088e35e29504" name="libsss_nss_idmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="b1192250944d685e3b1df975fe3857e98efee52471c09e7857f52770dacce2cd" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="7d04174c4377181d393d2ee7ffebcce5a1863fd993bcaab530adea630feb1584" name="libsss_nss_idmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="073889b49cc9f6802240c1cabefd44dfdce8200335e7c207e33e8993b27e8348" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d15b38e8a409962ed2f9caf196e60be66f5a0af112832215dde5ba8250e63f21" name="libsss_simpleifp-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d82990ca79ebd81981589723228345e575f1f99fec36f4481fe6df129bdf91ac" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="f6645d989af15c0a1af520d7f69973216c12742cd62604332363e56f354a5d71" name="libsss_simpleifp0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="5947332c9240e876ba7b8a56c87cd72c74b5ed7c5e3255cee08363c75950da95" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="34bdb52e4312104e288cd3c7c4e08888007f19be83f5eeed6254c1c225f05b72" name="libtasn1" arch="i586">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="94c0df7e3410b2ce46269c3470197b6b74b91cf692e0d6d7e4151f16dea12dfd" name="libtasn1" arch="src">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="meissner@suse.com" date="1348833600">- updated to version 2.14
  This release adds asn1_read_node_value() to obtain a node's value. This
  is to deprecate the export of the node_asn internal structure for the
  upcoming 3.x release. The ASN1_DATA_NODE type and the ASN1_ETYPE_*
  constants were added to support the new function.
- removed upstreamed libtasn1-stdio.h patch
- make check</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1353153600">- update to libtasn1 3.0, SONAME libtasn1.so.6
  - Added tool in tests/ to benchmark X.509 structure decoding.
  - Added asn1_read_node_value() to obtain a node's value.
  - Optimizations in internal tree allocation.
  - Optimizations in tree search.
  - libtasn1.h no longer exports internal structures.
  - Types were renamed for consistency:
    ASN1_DATA_NODE -&gt; asn1_data_node_st
    ASN1_ARRAY_TYPE -&gt; asn1_static_node
    ASN1_TYPE -&gt; asn1_node
    ASN1_TYPE_EMPTY -&gt; NULL
    static_struct_asn -&gt; asn1_static_node_st
    node_asn_struct -&gt; asn1_node_st
    node_asn -&gt; asn1_node_st
    (the old types are still available as definitions)
- fix W: devel-package-with-non-devel-group</changelog>
  <changelog author="meissner@suse.com" date="1371729600">- updated to libtasn1 3.3
  * Noteworthy changes in release 3.3 (released 2013-03-23) [stable]
  - More precise overflow checks using gnulib's intprops module.
  - Updates to compile in Android systems.
  * Noteworthy changes in release 3.2 (released 2012-11-30) [stable]
  - Corrected buffer overflow in the error reporting of the parser (reported
    by Andreas Metzler).
  * Noteworthy changes in release 3.1 (released 2012-11-24) [stable]
  - Completed rename of types:
    ASN1_ARRAY_TYPE -&gt; asn1_static_node (was asn1_static_node_t)
  - Added new types: VisibleString, NumericString, IA5String, TeletexString,
    PrintableString, UniversalString, BMPString, UTF8String. When re-defined
    a warning is being print instead of failing.
  - Parser outputs more detailed syntax error messages.
  - Added asn1_decode_simple_der() and asn1_encode_simple_der().
  - Added asn1_read_value_type() to return value and type.
  - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME
- added gpg source checking</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- remove gpg source checking again to avoid this cycle:
  libtasn1 -&gt; libssh2_org -&gt; openssh -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; libtasn1</changelog>
  <changelog author="meissner@suse.com" date="1401796800">- libtasn1.keyring: added Nikos Mavrogiannopoulos &lt;nmav@gnutls.org&gt;
  key, who did this release (and shares responsibility with Simon).
- updated to libtasn1 3.6
  * Noteworthy changes in release 3.6 (released 2014-05-25) [stable]
  - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735)
  - Several improvements and new safety checks on DER decoding;
    issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738,
    CVE-2014-3467/bnc#880737)
  - Marked asn1_der_decoding_element() as deprecated. Use
    asn1_der_decoding() instead.
  * Noteworthy changes in release 3.5 (released 2014-05-01) [stable]
  - Correctly handle decoding of recursive CHOICE options.
  - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara.
  - Several small bug fixes found by coverity.
  - Code improvements contributed by Kurt Roeckx.
  * Noteworthy changes in release 3.4 (released 2013-11-25) [stable]
  - Added asn1_delete_structure2() which allows zeroizing the contents
    of all values in the structure prior to deinitialization.
  - The parser accepts negative numbers in an INTEGER range (but
    still does no enforce them).</changelog>
  <changelog author="mgorse@suse.com" date="1406289600">- updated to libtasn1 3.7:
  * Noteworthy changes in release 3.7 (released 2014-06-26) [stable]
  - Fixes in length calculation in _asn1_extract_der_octet().
  - Fixes in DER decoding.
  - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738
    bnc#880737 bnc#880735</changelog>
  <changelog author="tabraham@suse.com" date="1412769600">- updated to libtasn1 4.2:
  * Noteworthy changes in release 4.2 (released 2014-09-15) [stable]
  - Added sanity checks in the decoding of time when
    ASN1_DECODE_FLAG_STRICT_DER is used.
  - Fixes in the decoding of OCTET STRING when close to the end
    of the structure.
  * Noteworthy changes in release 4.1 (released 2014-08-23) [stable]
  - Corrected indefinite tag check in ANY constructions. That allows
    the decoding of BER-encoded structures that contain indefinite
    encoding within an ANY element.
  - Added DER decoding flag ASN1_DECODE_FLAG_STRICT_DER. Over the
    years BER functionality was added to the decoder and this flag
    provides the way to disable it.
  - API and ABI changes since last version:
    ASN1_DECODE_FLAG_STRICT_DER: New definition
  * Noteworthy changes in release 4.0 (released 2014-06-26) [stable]
  - Optimized asn1_der_decoding_startEnd(). It no longer requires the
    additional decoding step.
  - asn1_read_value() understands the ?CURRENT keyword, which can be used
    to indicate the current element of a sequence, when the provided node
    is a sequence element.
  - Several optimizations in DER decoding of structures with sequences
    containing many elements.
  - asn1_der_decoding2() is introduced and allows flags to be passed on
    the decoding process. Currently only ASN1_DECODE_FLAG_ALLOW_PADDING is
    defined and that allows decoding DER structures that contain arbitrary
    data past their end. Contributed by Karel Slany.
  - API and ABI changes since last version:
    ASN1_DECODE_FLAG_ALLOW_PADDING: New definition
    asn1_dup_node: New function
    asn1_der_decoding2: New function
    asn1_der_decoding_element: It is now an alias to asn1_der_decoding</changelog>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="afe7506ef7b5d4f60b3847d9d30b35725e182cb8addb6f95c4ad44d9ef2d5fbe" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="ac2bc3835448d0cde622f509a41373aac62e3979b03f51c58dcc102924192dc1" name="libtasn1-6-32bit" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="9394e54a47857c496279b632a09ecb3622e51754a1637006a77b3bd14e34e031" name="libtasn1-6" arch="i586">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="00b33c9af6b8b4d606102b70b3345237f3b15299234022fb14bbd912bcf785d6" name="libtasn1-6" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="51b67f5e26e3eef80cb5d11f9d444373a63527e27b7b99da819d2c716d9609eb" name="libtasn1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="ee5e5fa005c8a3d318e9ccd214b58e6d2fb3e0ec12dd789e224b79fcc949e668" name="libtasn1-devel" arch="i586">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="0a3554803d08eb45e9360211ce6ade7dbef0fd3ccbb6b1c95f17aa8a1a31fdc2" name="libtasn1-devel" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="6f524edad87bfc7862a565e1094990986759965b19defcc9b6164c3367c4d9bc" name="libtcmu2" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp151.3.3.1"/>
  <changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
  <changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
  <changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
  <changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
  <changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
  <changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
  <changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
  <changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
  <changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>
  <changelog author="lduncan@suse.com" date="1505908800">- Add two patches: make target_core_user.h local, to insulate
  tcmu-runner from kernel version/data structure/naming
  changes, and add include of &lt;sys/uio.h&gt; to that file,
  to fix "stuct iovec" not defined issue  (bsc#1058303),
  adding patches:
  * tcmu-runner-add-local-target_core_user-h
  * tcmu-runner-remove-uio-include-for-iovec.patch
  The latter patch is added only for SUSE version &gt;= 13.3,
  since it is only needed there.</changelog>
  <changelog author="ddiss@suse.com" date="1518177600">- Update to version 1.3.0; (fate#322524)
  + Improved Ceph RBD integration
  + Support XCOPY copy-offload commands
  + Support COMPARE_AND_WRITE, with Ceph OSD request mapping
  + Asynchronous I/O improvements and bug fixes
- Remove a number of downstream patches now carried upstream:
  + glfs-discard-glfs_check_config
  + fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
  + only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
  + fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
  + removed-all-check_config-callback-implementations-to-avoid-security-issues
  + tcmu-runner-add-local-target_core_user-h
- Remove development packages (bsc#1080619)
  + API discontinued upstream
- Add fix for -Werror-return-type failures:
  + api-avoid-compiler-Werror-return-type-failures.patch
- Add fix for library versioning:
  + build-drop-versionless-libtcmu.so-symlink.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539950400">- Update to version 1.4.0:
  * tcmu-runner: bump version to 1.4.0
  * Disable explicit alua support.
  * logger: notification on changing the options for dynamic reloading
  * logger: update .gitignore for logrotate.conf_install.cmake
  * logger: fix the return value
  * Sync sig handler naming.
  * Add logrotate support
  * Move starting log message.
  * Allow log file restart from SIGHUP
  * Simplify log outputs
  Replacing tcmu-runner-1.3.0.tar.gz with tcmu-runner-1.4.0.tar.xz,
  updating the SPEC file, and removing patches:
  * api-avoid-compiler-Werror-return-type-failures.patch
  * build-drop-versionless-libtcmu.so-symlink.patch
  * tcmu-runner-remove-uio-include-for-iovec.patch
  * support custom cephx credentials; (bsc#1135369)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558440000">- Rename openSUSE zbc patches:
  + file_zbc-fixed-compile-error-under-ppc64le -&gt;
    file_zbc-fixed-compile-error-under-ppc64le.patch
  + file_zbc-optionally-build-zbc-handler -&gt;
    file_zbc-optionally-build-zbc-handler.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558526400">- Add explicit libtcmu package dependency to avoid incorrect upstream
  .so versioning; (bsc#1135815)</changelog>
</package>
<package pkgid="bb22f735727bc5511c3064f22fd8944c92d863f348f5413a1c93f8f5886a2f61" name="libtevent-util-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="249147b9c551dc41e4e2c8a14474b2d90c4330cacce6bf594e3edd1cff22e6cc" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="5aaa615e338b0c4c0f72ae45954cdb00a8caca8fe3d2fed7a09d612edb182771" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="a1a3dc599a700fd5fbcb03307673f1078beff2e8946f1acabb363e92a456b996" name="libtevent-util0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c3651549701b4ac02c405e0037eacbecd9bdb19dc2f91ab3c849e1660e11970d" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="02be5b358fd63b60c49c89ed11a53bdfe33c47e6f7fef1aef1664cc8058cbf33" name="libthunarx-3-0" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="1703c3e17565685168e8367d115fd3067e33d43c8e4caefd63dba47e7f76772b" name="libtracker-common-2_0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="7d67dd99f935a8f04e4fddb64c31bc6478128c6de0ab4ca79b0659141d9d7234" name="libtracker-common-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="5d43b3cb3dbb3205a80ed1fa0d6e6db1249c2b928f6eb2a8528e5d965a8ff692" name="libtracker-control-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="b853dd37549828eb2f2d0fef304792e3085576a858207e89674cd78e4213ffec" name="libtracker-control-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="4f95b55198ce31a3bb1eb522b4a6b13d713f6365f33198b3e33a6f4ebd82c75f" name="libtracker-miner-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="9fb75ad4a9f9f51328661c4f76c02a74b2da92bba7d1b375833c411957d672dd" name="libtracker-miner-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="0bac9a83b84ffb9fb0b80b6cfc8ee230e0c3511ab4a8998779ebbb849dd8294a" name="libtracker-sparql-2_0-0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="5d71e4ce107862865436783bd2e9f5922987d94ce4a5c72afcb2381ee6486109" name="libtracker-sparql-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="b9e297bc2474d6317e1f4ad024aae4a862548bf77a43483d8a76ca8e99c3823a" name="libu2f-host" arch="src">
  <version epoch="0" ver="1.1.6" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).
- Applied spec-cleaner</changelog>
</package>
<package pkgid="9555dd006755016106eb4518e43e3847ca2af6c5e83f914018cec89f70c93d7d" name="libu2f-host" arch="src">
  <version epoch="0" ver="1.1.6" rel="lp151.2.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559044800">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
</package>
<package pkgid="b2886ef1bf046018271992be02b0a51e38424383186b8e5b7dfb2f3c25ee2070" name="libu2f-host-devel" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).
- Applied spec-cleaner</changelog>
</package>
<package pkgid="6d18688c95132b6100417e73c50c4b323902ef01001686d74ae388a6c55430fd" name="libu2f-host-devel" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559044800">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
</package>
<package pkgid="6f8c7d94c849c626c5f3724ce3f956d4957991ea2b056c5f4f9d7e56499b5201" name="libu2f-host-doc" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).
- Applied spec-cleaner</changelog>
</package>
<package pkgid="baa0f678011d01929a0d2bdfd7e0d7e7b7828dd7d4dc7e0387bbf2bb91488aad" name="libu2f-host-doc" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559044800">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
</package>
<package pkgid="ee5a521aa1c0d8b6634e9ca7a314ea69adee02363513ba6ad36706af75f5ebce" name="libu2f-host0" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).
- Applied spec-cleaner</changelog>
</package>
<package pkgid="e3397fbc3fe53b6c0c2b476f7d38f729d35b751d4d14f109a616efc6ca12fdc5" name="libu2f-host0" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559044800">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
</package>
<package pkgid="02eb0a547b5d368720aa26e4b4f8552425836b287767c86b844dd401e5b36f0b" name="libvirt" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="9a38198bcce33f4604486327ad85ba55a22dcb2ef1c58d3a082bee3f7b8c2ae7" name="libvirt" arch="src">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="6271e736ae9165cfbed638a3dcbaee71c94e7eac0424a6b865935d8b5e0d830e" name="libvirt" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="0ccdadd5e9f5ed268164a4d9c5f14a1f7be010b6c2ef2187f287c7075961dc7d" name="libvirt-admin" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="b3b60b0bfa5c7022656849bd9af3e196a163f10cf6c928e1f5511d8348fadd2b" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="3e42d8d8f0361487139b5c449ca8709f1b508b104a093a9ebabeedfc4eb9ec8d" name="libvirt-bash-completion" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="41ef35d7da7df0531dddcf847f42bbef364fd85bc8ee0676e4bc7684947738a0" name="libvirt-client" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5d8dad3c74f8f2fa98bb88469f83c59c8a159ccde015c8c2beff3df695f874fe" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="d1b05240a7a89376da15803da1d2c83b821aae0234c4e1197938941f46253c63" name="libvirt-daemon" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="adfcb0d90b4e2e7be964070dae6d794388f8576f4b09394514a29fcd9b7f3931" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="9279b3442c68ef68f8be8510be5a2ff4d09d2d0e25df96317c9719c175ef78d7" name="libvirt-daemon-config-network" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="c6800680afaaee6968259be4e47dac2f03bdf210abee2d9415188e216d017b37" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="eaf894c9e2da2282e038aec8abc168d651903ea50975fa754128f1f677813219" name="libvirt-daemon-config-nwfilter" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="d1f1f2fcc106fcc99b7628ba562b12157939c74a01767b6f363a77a5d594b26f" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="64a5b67c7ad4dd59ae97c7927056ad1fdc7170f82940a75d52c378cdba5c23e4" name="libvirt-daemon-driver-interface" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="a612dadf43aafcc843ad3ab906d95b3b9ca6f35f52484fc51b3d99e826e7d03c" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="c902a2e3e520b5dfa25c2a6443033d4c2328022143138b53a967954c445e393d" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="21c37f4a70dafef101d8ecc10f83f7cef2fcf67c89bc5fe1beaf2afa5c055eb8" name="libvirt-daemon-driver-lxc" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="c9f7c25303a350a908cfd002169a4b62d917618a63cd0fe35069d46084acee8e" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="1b502d46511c25027044ce0a34bd0b04fd8695bb3826ca8b3f9cea7fe1d29f58" name="libvirt-daemon-driver-network" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="553b7ceeae0be875616c7da29c4301e12ea9593a2597f1334130dab997301ab4" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="404e869bef4759c18573812956a36fd53834d46e301f340126099059da3765d0" name="libvirt-daemon-driver-nodedev" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="255211979f1e8a60f59e3e030009e664a2a4f6f84ea30ecc21fbf9234e3ec63d" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5b1e8ca2a276a0c91b2dc1b8a0b3591864d2e8a897ecf54245fe984c0791b318" name="libvirt-daemon-driver-nwfilter" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="94f9c3d081b6dc5620229f212f89ceb35f8eb3c3972fd4d4df35d50ed36ffe7e" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="42eb16aeac8f1589560a8bb664a3635bf39cf5d75de3ac185a5ca39f96f4c31b" name="libvirt-daemon-driver-qemu" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="a9cb1e00e41958dfa90353b507af0d8685789e0cbd0142cc4ccaacf6bca9f25e" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="a0de3c53cd58ad068b82ad8a93a37c2f2ccbf03ae46977b12203f4f9ec0296aa" name="libvirt-daemon-driver-secret" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="ef8cc0a2d9980a684a9698774ca290bee5861c34716b56a1506d60824c9051ae" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="22c951cc4d59e4d822203b9954826814c56ce8643b86c59788cc567687ab5909" name="libvirt-daemon-driver-storage" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="780e12cb6df6ea2a1da93704d5e70e44f685e5d0dddf350afd9a8bab1d3042d6" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="fa40fd84474625270aef167c5f3ead99e4081566e2def137d81b1eebf0133f88" name="libvirt-daemon-driver-storage-core" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="39b8355b59f66e5575d50c2344104f703f9fd1c4eb4f4847eaf5f8e01f52f6f8" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="2d4360f5efc17339d735495d115c24044151e8061ba4b47cd91a2cd3ffc7744c" name="libvirt-daemon-driver-storage-disk" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="9dd80016b0ab357a50658b9a33bf2f407f4ce4093782aabd62c4e77ccc32b25c" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="2a224ea2e1c0ffd1f45489ff1d8792fcff8abfca335ecbda07f67d9fb141330c" name="libvirt-daemon-driver-storage-gluster" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5bf2c3a8f455d78ee38f149d4d6cd699a0864d80dd979ab0a91ed26c6bdef4b9" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="124f444b0fcf21db318f0b725743cabde04200bc0cc7c2c5ddda332b3ed1ed0b" name="libvirt-daemon-driver-storage-iscsi" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="0630399288d6a374720003b043a3bac776e0e60ec3e01413904ed8a107a0f128" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5b9e11a8da36498a5239a7ab542fd211548116d96d449dc63908122dbf5018b2" name="libvirt-daemon-driver-storage-logical" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="23bb48d56626a41fdbc871343d9386103f836265d57ba3ed7e8585b01bd3133b" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="fdab0e8a2e2854d9087c3ce166c6005968c81d9c30501456499bce57ea9be6a3" name="libvirt-daemon-driver-storage-mpath" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="cc1cd429be260e20213cad6d81867f8c279a84537811e1d435f66bf0bab4bb90" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="067d3cfc939020cb4a10dcaa6579e73724b7b331ead2c899ba24bd2db0f4d868" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="ab5a5f2570e9092878afb5c083bded198e820734affee6fd275fd2d7bcdcbb58" name="libvirt-daemon-driver-storage-scsi" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5694c4dfb5a8f8482dc34ce1405433539d83c44984f708c5cb869ccb34e92be1" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="660e2bd8c98840fcb91549486bc2f7877af8a3f2a130a7f008f0371680d5566f" name="libvirt-daemon-hooks" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="5ae5a7a71eef607a68afb8221bfe3cbd036778d9a6fbc28033276db0b320057b" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="e0b32cff0009bed5b64ffcc081141555e3415d3067f19436d3e37ab34c2e2c62" name="libvirt-daemon-lxc" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="cf57afbf57efe9f726e349e8a9d509478a0d6d9edc6a65e9d62da9d67d584b17" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="b8becfa26bbb3fd8ec71a2b386821f54300f0753bd53cd96a89fabb7904e896c" name="libvirt-daemon-qemu" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="ca37afcd8f0046b1722afcf7453e304dc46e01aeac1d5eebc71dc520eaa6cb07" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="a340106e87421ad23b133fb766007aa1a1e09aeafc0158a3fdd665dae3256530" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="7584740256030f232671068943f94574d9bebc85d7e0158512a6d380cbab3c7c" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="cfa376c1c364212daa378ac0f40b4607884f8715352371720de5a16b4fc77948" name="libvirt-devel" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="8405e0815b0b8d49f2a46487a2cbc823fb8e8aecd917e59c7f114886088be7e7" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="92cb338e4f9a265f964dfeddf87ca407e4b46e5a66c48c28f99da6b743fdc63e" name="libvirt-doc" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="4a4f12565a916a8c25b72e561f9d5771855567f94c73dd8e7470e948ff571429" name="libvirt-libs" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="76bfd0fa010e1b6fb05548117e7f077e49c54dc70e15f8da5ee970c94ec45a0a" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="d93241041e4eeff6ed3d23ff86ad6a73efb632a19b104d08d4214d3e82d1068a" name="libvirt-lock-sanlock" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="94b482d0931165216c8f587e0dac16be91f073ed1a2f536ac76d1086221c7aeb" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="730799e83fc998c3887201739316425df9c77bc71648d818bd47a81c2e7f206e" name="libvirt-nss" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="a925718ebb6bcb87453c6d1f759fb4179956b1bbfd995a75d9a4312de1991638" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="fad4ac48e91907c9d279db67f8046789c58eb2839a0e65d2dfca32f42c822821" name="libvlc5" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="9066f57058b45bb5ed9d7310aefac6c593709c88cfbf6996219892aec5f5fc64" name="libvlccore9" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="0b0c5e4f23a739efc43b288910545f41495ddfce9aed5566b6fd41e0eac3d1a1" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="10.3.10" rel="lp151.2.3.1"/>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
  <changelog author="kallan@suse.com" date="1541764800">- Update to 10.3.5 (build 10430147) (boo#1115118)
  + While running a quiesced snapshot of a Linux guest onthe vSphere hosts
    earlier than version 6.7, open-vm-tools logs warning messages.
  + CreateTemporaryFileInGuest/CreateTemporaryDirectoryInGuest returns a file
    path that does not exist.
  + Excessive spikes of the Memory/Workload percentagemetric, in a vRealize
    Operations cluster.
  + open-vm-tools Service running as vmusr crashes on Linux systems which are
    not running on the VMware platform.
- Drop unnecessary patch:
  - false-negative-cloud-init.patch
  - handle-linux-kernel-stat-overflow.patch
  - optional-override-os-name.patch</changelog>
  <changelog author="kallan@suse.com" date="1548763200">- Update vmtoolsd.service to support cloud-init customization by default
  by adding "DefaultDependencies=no" and "Before=cloud-init-local.service"
  to the [Unit] section of vmtoolsd.service (bsc#1121964) .
- Copyright year updated in spec file.</changelog>
  <changelog author="kallan@suse.com" date="1549627200">- Link VGAuthService to libxmlsec1 rather than libxml-security-c in SLE
  products where available. (bsc#1122435)
- Add patches to correct and/or improve handling of certain quiesced snapshot
  failures (bsc#1124397).
  + no_manifest_on_aborted_snapshot.patch
    Don't send a backup manifest when aborting a Linux quiesced snapshot.
  + vmtoolsd_bailout_on_rpc_errors.patch
    Bail out vmtoolsd early when there are RPC errors.
  + send_vmbackup_event_generic_manifest.patch
    Always send VMBACKUP_EVENT_GENERIC_MANIFEST during quiesced snapshots.
  + include_log_h_for_g_info.patch
    Include vmware/tools/log.h to define g_info.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warnings.patch (bsc#1126102).</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1552478400">- Link VGAuthService to libxmlsec1 rather than libxml-security-c for
  SLES 15 and SLES 15 SP1. It requires libxmlsec1 to be available in the
  base.  VGAuthService is already being linked with libxmlsec1 for
  SLES 12 SP4.  (bsc#1122435)</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1553860800">- Update to 10.3.10 (build 12406962) (boo#1130898)
  + Resolved - In certain cases, quiesced snapshots on Linux guests do not
    include backup manifests.
- Drop unnecessary patch:
  - include_log_h_for_g_info.patch
  - no_manifest_on_aborted_snapshot.patch
  - send_vmbackup_event_generic_manifest.patch
  - vmtoolsd_bailout_on_rpc_errors.patch</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1557230400">- Update vmtoolsd.service tools to run after the network service is
  ready. (bsc#1133623)
- Link VGAuthService to libxmlsec1 rather than libxml-security-c in
  SLES 12 SP3. (bsc#1122435)</changelog>
</package>
<package pkgid="4d3aae95ade909f336a13230787854f8840455185bf3bb97d685540fa4def35a" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="10.3.10" rel="lp151.2.3.1"/>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
  <changelog author="kallan@suse.com" date="1541764800">- Update to 10.3.5 (build 10430147) (boo#1115118)
  + While running a quiesced snapshot of a Linux guest onthe vSphere hosts
    earlier than version 6.7, open-vm-tools logs warning messages.
  + CreateTemporaryFileInGuest/CreateTemporaryDirectoryInGuest returns a file
    path that does not exist.
  + Excessive spikes of the Memory/Workload percentagemetric, in a vRealize
    Operations cluster.
  + open-vm-tools Service running as vmusr crashes on Linux systems which are
    not running on the VMware platform.
- Drop unnecessary patch:
  - false-negative-cloud-init.patch
  - handle-linux-kernel-stat-overflow.patch
  - optional-override-os-name.patch</changelog>
  <changelog author="kallan@suse.com" date="1548763200">- Update vmtoolsd.service to support cloud-init customization by default
  by adding "DefaultDependencies=no" and "Before=cloud-init-local.service"
  to the [Unit] section of vmtoolsd.service (bsc#1121964) .
- Copyright year updated in spec file.</changelog>
  <changelog author="kallan@suse.com" date="1549627200">- Link VGAuthService to libxmlsec1 rather than libxml-security-c in SLE
  products where available. (bsc#1122435)
- Add patches to correct and/or improve handling of certain quiesced snapshot
  failures (bsc#1124397).
  + no_manifest_on_aborted_snapshot.patch
    Don't send a backup manifest when aborting a Linux quiesced snapshot.
  + vmtoolsd_bailout_on_rpc_errors.patch
    Bail out vmtoolsd early when there are RPC errors.
  + send_vmbackup_event_generic_manifest.patch
    Always send VMBACKUP_EVENT_GENERIC_MANIFEST during quiesced snapshots.
  + include_log_h_for_g_info.patch
    Include vmware/tools/log.h to define g_info.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warnings.patch (bsc#1126102).</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1552478400">- Link VGAuthService to libxmlsec1 rather than libxml-security-c for
  SLES 15 and SLES 15 SP1. It requires libxmlsec1 to be available in the
  base.  VGAuthService is already being linked with libxmlsec1 for
  SLES 12 SP4.  (bsc#1122435)</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1553860800">- Update to 10.3.10 (build 12406962) (boo#1130898)
  + Resolved - In certain cases, quiesced snapshots on Linux guests do not
    include backup manifests.
- Drop unnecessary patch:
  - include_log_h_for_g_info.patch
  - no_manifest_on_aborted_snapshot.patch
  - send_vmbackup_event_generic_manifest.patch
  - vmtoolsd_bailout_on_rpc_errors.patch</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1557230400">- Update vmtoolsd.service tools to run after the network service is
  ready. (bsc#1133623)
- Link VGAuthService to libxmlsec1 rather than libxml-security-c in
  SLES 12 SP3. (bsc#1122435)</changelog>
</package>
<package pkgid="464a3e290349087ecb02af36b9f36fdecd28193960d16dbf4a5b7a4a839900e8" name="libwbclient-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="423900319c6dd2d6b65bf50b10d1dbc76dc6bea5ec2a90520b4e265c1f3f9214" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="421dc2387ea2f94eb94c4f1d52fdbc01310577d763c0c9c0f6c871d9c2a46830" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f1cb4d3d190f5fd58bc2820dd339af797e7b245d27d4271e99d8fce8dfc8ed44" name="libwbclient0" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="603597bea3998af6e9d2e08b0a007b79624e9cc024f1832d3ae071ff02118b0b" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="67706f58466434c2979e4b0fa0c6bceb7207882e0bc1975bde46ca468e387553" name="libwebkit2gtk-4_0-37" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="f53dc1f31bf874c7db061ed5115c8c16e39ce3c3a81abccf110594796a9b82a0" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="f9cf8c2a78a7bff05370bd8095aae322f5bcdb8d9bf5db2783119c54b3a1005b" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="667fee88dd821736a9878c6b2fa7b328978ecc9574b27de598a5a8c1c43b579d" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="abf05e4447f78d88e25d5e536bcd0edacc0491ee3f28a784ffa9ef17211ea713" name="libwireshark9" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="fdd1d6a13ba07bbb4cc0b0c3ffade4d3cb3280e32389c6cacc0466eb2de8695e" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="fb074060b722b415f4c25a9c5557c2a7a037efc604e8b1ac7adbea525b2b6908" name="libwiretap7" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="2b12602d0edf238d9acf64bf919ca8e2951a8304dd1eef558bf0fd5718c5e29a" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="4a307e29f5c073e4b76dd32fe7c1c7c1b363978ef76c183975cf373b07a6748a" name="libwscodecs1" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="bcb6e10fb43335748a44f938c2cdbb93ffbeb69bef07a0123c128a26d61be763" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="d8aafd0947fe643328d49b2697b9d87b8ae6c84333188e50aaa4ca69a2b45f71" name="libwsutil8" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="9caa92b92bf4d6992b5116633f72ee786b2c57c7d083a406f485bae68c5a6d2c" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="b28f721600f3f092a84efba690dc67c752f9bc6de5067a1b5497edf615f13bfb" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="agraf@suse.com" date="1322913600">- don't run make check in QEMU builds - breaks due to massive threading</changelog>
  <changelog author="cfarrell@suse.com" date="1325678400">- Tutorial contains GPL-2.0+ code. Either split this off into a subpackage or
  add GPL-2.0+ as an aggregation to the main licence tag</changelog>
  <changelog author="jengelh@medozas.de" date="1325678401">- Remove redundant tags (License: field is inherited)
- Use exact EVR for Provides:</changelog>
  <changelog author="jengelh@medozas.de" date="1331985600">- Make sure to follow shlib policy; put tools in a separate package
  like done in libxml2</changelog>
  <changelog author="chris@computersalat.de" date="1335355200">- add macro "soname" %{name}1
- fix "self obsoletion"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1354795200">- update to 1.1.28:
  * fix generate-id() to avoid generating the same ID
  * fix crash with empty xsl:key/@match attribute
  * fix crash when passing an uninitialized variable to document()
  * fix regression: default namespace not correctly used
  * remove xsltTransStorageAdd and xsltTransStorageRemove from symbols.xml
- changes from 1.1.27:
  * link python module with python library (Frederic Crozat)
  * report errors on variable use in key
  * the XSLT namespace string is a constant one
  * fix handling of names in xsl:attribute
  * reserved namespaces in xsl:element and xsl:attribute
  * null-terminate result string of cry:rc4_decrypt
  * EXSLT date normalization fix
  * exit after compilation of invalid func:result
  * fix for EXSLT func:function
  * rewrite EXSLT string:replace to be conformant
  * avoid a heap use after free error
  * fix a dictionary string usage
  * output should not include extraneous newlines when indent is off
  * document('') fails to return stylesheets parsed from memory
  * xsltproc should return an error code if xinclude fails
  * forwards-compatible processing of unknown top level elements
  * fix system-property with unknown namespace
  * fix default template processing on namespace nodes
  * fix a bug in selecting XSLT elements
  * fix a memory leak with xsl:number
  * fix a problem with ESXLT date:add() with January
  * fix generate-id() to not expose object addresses
  * allow whitespace in xsl:variable with select
  * fix direct pattern matching bug
  * add the saxon:systemId extension
  * add an append mode to document output
  * fix portability to upcoming libxml2-2.9.0
  * precompile patterns in xsl:number
- change soname macro back to "1" and enforce it in the files list
- revert -tools subpackage for openSUSE &lt; 12.2 as that has only
  become effective since 12.2 on the package that ships with the
  distribution, to avoid having a completely different package
  layout in this repository as compared to the stock distribution
  packages (added a Provides: libxslt-tools though)</changelog>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="15ab01d34da58058b7c957dde0a0a58e340c474e26a9bc1bd5063c1a0715c60e" name="libxslt-devel" arch="i586">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="eca6fd8af17a065dfabcbfd90cf0eed475392837c8b44caa0d8c31f16f46cd8d" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="61ffa732e46afbcba9e935db40a049037b962e38e5d8b7ac4dad5788eba03b22" name="libxslt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="da48af9eebd14b06ced104a793789f845c9224eedf5f7f73d6446b21f627db59" name="libxslt-python" arch="src">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1190116800">- Updated to version 1.1.22:
  * Bug fixes: RVT cleanup problems, exclude-result-prefix bug,
    stylesheet compilation error handling, out of memory allocation
    errors, namespace problem on compound predicates, python
    space/tab inconsistencies, hook xsl:message to per
    transformation error callbacks, cached RVT problem, XPath
    context maintainance on choose, memory leaks in the math
    module, exclude-result-prefix induced namespace problem
  * Portability fixes: improve build with VS2005, fixing build on
    AIX, fix the security file checks on Windows.
  * Improvement: add an --encoding option to xsltproc.
  * Build: configure setup for TRIO_REPLACE_STDIO
  * Documentation: updated after change from CVs to SVN</changelog>
  <changelog author="prusnak@suse.cz" date="1201003200">- build without strict aliasing (as main package does)</changelog>
  <changelog author="prusnak@suse.cz" date="1207915200">- updated to 1.1.23
  * Documentation
    fix links for Cygwin DocBook setup (Philippe Bourcier)
  - xsltParseStylesheetDoc doc fix (Jason Viers)
  - fix manpage default maxdepth value
  * Bug fixes:
  - python segfault (Daniel Gryniewicz)
  - week-in-year bug fix (Maurice van der Pot)
  - fix python iterator problem (William Brack)
  - avoid garbage collection problems on str:tokenize and str:split
    and function results (William Brack and Peter Pawlowski)
  - superfluous re-generation of keys (William Brack)
  - remove superfluous code in xsltExtInitTest (Tony Graham)
  - func:result segfault fix (William Brack)
  - timezone offset problem (Peter Pawlowski),
  * Portability fixes:
  - old gcrypt support fix (Brent Cowgill)
  - Python portability patch (Stephane Bidoul)
  - VS 2008 fix (Rob Richard)</changelog>
  <changelog author="puzel@novell.com" date="1279713600">- updated to 1.1.26
  - no python related fixes in this libxslt release</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311940800">- Rework build of this package in a sane way.</changelog>
  <changelog author="idonmez@novell.com" date="1311940801">- Fix build by not using %exclude</changelog>
  <changelog author="idonmez@novell.com" date="1312200000">- Correctly obsolete libxslt package in the baselibs.conf too</changelog>
  <changelog author="idonmez@novell.com" date="1312286400">- Add dependency on libgcrypt-devel and libgpg-error-devel for
  the libxslt-devel package.</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1329393600">- add libtool as buildrequire to fix compilation</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1354795200">- update to 1.1.28: see changelog for libxslt1 1.1.28 for details
- enforce having the same version of libxslt1</changelog>
  <changelog author="dl8fcl@darc.de" date="1358337600">- in spec file moved the "BuildRequires:" and "Requires:" tags
  behind "Version:" tag to have them read the variable correctly.</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Version update to 1.1.29 to match libxslt main package
- Sort out with spec-cleaner
- BuildIgnore python to avoid cycles
- Run tests and do not install them as docs</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414401">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="5ce567752c318621eaee71f7efd98835323a42c50ce3251bb42c541cc5ae0e6e" name="libxslt-python" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1354795200">- update to 1.1.28: see changelog for libxslt1 1.1.28 for details
- enforce having the same version of libxslt1</changelog>
  <changelog author="dl8fcl@darc.de" date="1358337600">- in spec file moved the "BuildRequires:" and "Requires:" tags
  behind "Version:" tag to have them read the variable correctly.</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Version update to 1.1.29 to match libxslt main package
- Sort out with spec-cleaner
- BuildIgnore python to avoid cycles
- Run tests and do not install them as docs</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414401">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="93c70670311e3e74f3d098acf6bcc467664a2ec6863394a9b27d92d6ff7f1fec" name="libxslt-tools" arch="i586">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="d2a275787ed9d14aaa9fd60db2f5ddfd7a3ab649da00828d71a7bba01e84cdf4" name="libxslt-tools" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="d86962daae0ebf735c5ef06db6e3281bc78060c3ef42171f4d3146a2a9bc1a79" name="libxslt1" arch="i586">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="9e6a24a15ff1f4e4b09d2949de14ba2f5764de395f5e2c14c73bf91b23172145" name="libxslt1" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="798f37f054b0dbb6c595c73b36995a4abfee8d9695fb7d81ea9b1ee41870bc01" name="libxslt1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="lp151.3.3.1"/>
  <changelog author="coolo@suse.com" date="1422792000">- add 0009-Make-generate-id-deterministic.patch from debian's
  reproducible builds project to avoid randomness in generated IDs</changelog>
  <changelog author="suse@microstep-mis.com" date="1428580800">- fix package with "soname" should obsolete libxslt package on suse &lt; 12.2 (SLE11)</changelog>
  <changelog author="kstreitova@suse.com" date="1463745600">- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
  type confusion in preprocessing attributes [bnc#952474],
  [CVE-2015-7995]</changelog>
  <changelog author="tchvatal@suse.com" date="1465646400">- Update to 1.1.29:
  * new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
  libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1489406400">- Added patch libxslt-CVE-2016-4738.patch
  * Fix heap overread in xsltFormatNumberConversion: An empty
    decimal-separator could cause a heap overread. This can be
    exploited to leak a couple of bytes after the buffer that holds
    the pattern string.
  * bsc#1005591 CVE-2016-4738</changelog>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
</package>
<package pkgid="66086c82507b9c98c7b05cb00bbf217bf0d29fe64f97d340f9e4647352c04ee3" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp151.5.3.1"/>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
</package>
<package pkgid="f758a51827578d94082390016cd3645e7a638935a3d1c3fa9de982c398cd8e39" name="live555" arch="src">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1328011200">- Update to version 2012.01.26.</changelog>
  <changelog author="dimstar@opensuse.org" date="1328443200">- Update to version 2012.02.04:
  + Updated "WAVAudioFileSource" to read from its input file
    asynchronously, if possible, rather than doing a synchronous
    (blocking) read.
- Changes from version 2012.02.03:
  + Updated "RTSPClient" to - after receiving a "SETUP" response
    for a UDP stream - send a couple of short 'dummy' UDP packets
    to the server.  This will make it more likely that the
    incoming RTP/UDP packets will successfully traverse a NAT box
    (if the client is behind a NAT).  (Note that we don't do this
    for RTCP, because the client's regular RTCP "RR" packets will
    have the same effect.)
  + Changed the way that the "sessionId" member field in
    "MediaSubsession" is managed.  Its memory is now managed by
    "MediaSubsession" itself, rather than by "RTSPClient" (as it
    was previously).  With the previous behavior, "valgrind"
    (incorrectly) reported a possible memory leak. The new behavior
    should make 'valgrinerds' happy.
- Drop patches that were required by VideoLAN: fixed upstream:
  + live-getaddrinfo.patch
  + live-inet_ntop.patch
  + live-uselocale.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 2013.04.30:
  + One year worth of updates... see changelog.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412251200">- Update to 2014.09.22:
  + Changed the way in which the "RTSPServer" code handles incoming
    "OPTIONS" commands that contain a "Session:" header. If the
    "Session:" header contains a session id that does not exist,
    then we now return a "Session Not Found" error (even though the
    handling of the "OPTIONS" command is not session-specific).
    This new behavior will help proxy servers (that use our
    "RTSPServer" implementation as a 'back-end' server) better
    detect when the back-end server has restarted while streaming.
  + For all other changes since 2013.04.30, please see
    http://www.live555.com/liveMedia/public/changelog.txt.</changelog>
  <changelog author="aloisio@gmx.com" date="1412596800">- Added support for pkg-config by creating the relevant .pc file</changelog>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="d428f253ce0eec928fcfeba2d8dd43504c63bdeac9b723515783cc0d88ab71d9" name="live555" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="4300fcc79438d98b2cdf13d5a164e36bbf93246c8324519a0846afdbe468507a" name="live555-devel" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp151.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="67014bfa434a9a2d49a6f4235aca4aa4c1f6501ecb8f29f1c6e7e45ae16a51d5" name="lld7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="9242bf8e73a136931b0cedfe71ec29b002c0df1efea2c3ce41ff045b8f5302f8" name="lld7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="8381a53f5259261500126db08060a68a8372145972cfd7679387a1c06f1293b9" name="lldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="894a84e96b272c6b522ed95eb5598159cfd81446d4d562f3e3730d0168228532" name="lldb7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="cfb263af6dbac2ced4ae2e1a15513965cb268bdc97b53461d706f5ab9b835d90" name="llvm7" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="2b3852e186f15b45fc0f74df5064743202f6ab6ff24755919d2825c2f2beaa03" name="llvm7" arch="src">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="a42489abcb0b39bf0f9494b5fe027831d41743a798d97a6b8d63244f2359f671" name="llvm7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ab4e2998e18b88ceae41dc4cc010ab4c3e64818477f10cc4083c02bfa67944be" name="llvm7-LTO-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ebd98f3ee948056f7b22beed3217d38a271b80fab4b261b55fcc0ebcb38d377f" name="llvm7-LTO-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="4211edee30b303a7b2a78183b19ebab81b789fb407216388428958dafaaeb100" name="llvm7-LTO-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="3f929ba6a44e096e06a3dcbe50c171d93c1c8b8f83245efc1187d427931501e4" name="llvm7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="27fa8f1fade31c67cff204f41c3315950a95c6fcff51b41d899671028fbde723" name="llvm7-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="882ec868e0404fc943acd65e2f7c56e98559ceebe7b8c59dce8e6a757ec8ac16" name="llvm7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="e82ef787d00b494548b72736759a8d6b9b20618b1d9837cb8ac028625fa396e2" name="llvm7-emacs-plugins" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="842ee52ce6aa66ca27a1fe38ca7f0ce2ba1d0edcdc0857cf1a101362b8e22b9b" name="llvm7-gold" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="a15bf9fe68650c7be1aa8a9df4326b29bfc9b2cee4a887ea2b323785f3d1180b" name="llvm7-gold" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="904b8c55a47b1a401ed6ca1efe6f8decf29e73a81ecef8ac54315fd1cb8d0a33" name="llvm7-opt-viewer" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="30c6f537028b33e4db6df6f8cccc5bf165e8f17c44ad2afdbb7a75ce6dd7658f" name="llvm7-polly" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="63a0dec3d625f857c3c8e53bfd53aeef4e8864a143c75043ba78cc0f174b8684" name="llvm7-polly" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="13b20485cf7dda384f8295035f604d2c22d51fa92a6d07539b252be3963a6ee5" name="llvm7-polly-devel" arch="i586">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="c78d24586a94bc2b49601f935773a13ddf1e1958c128b8e50090e212103a5e16" name="llvm7-polly-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="783c3db96f95ab9b1185dc7c287557b70d9518850a24bc0fb518dd9540ef0611" name="llvm7-vim-plugins" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="ed22218ad1de280db4c0654075524d8921d44f733555563a9ae36a7fd94989d8" name="lua-libguestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="8ed03ef91c8c81c02e10e70c9170bfeb1dfa60f8567cdc010db50301eb6a4ff1" name="lua51-lua-mpris" arch="src">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.5.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
</package>
<package pkgid="d8fa81aad83f611dd911f4fc76904447e23b8ab1ca099f57d1aa2ab9eee96dc8" name="lua51-lua-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.5.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
</package>
<package pkgid="37f006a1e745f26a9fc9f5b426b877671080ac69c9aeac670f007b6f12251b9f" name="lua51-lua-mpris" arch="src">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.8.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add 0003-Fix-table-function-renaming.patch to fix an error introduced
  by bad last minute refactoring (boo#1136883).</changelog>
</package>
<package pkgid="e36f50336cbdeda15ab8b9ec928b4f6026e9038257b1b63e8f5156942302671a" name="lua51-lua-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.8.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add 0003-Fix-table-function-renaming.patch to fix an error introduced
  by bad last minute refactoring (boo#1136883).</changelog>
</package>
<package pkgid="3ff6d730ced6be15100379fb958f7c22a5fd715f34fe5fcfea1f4e5076dec2ae" name="lua53-lua-mpris" arch="src">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.5.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
</package>
<package pkgid="40c3a2812553ba2c64f02de176165d17a9f939385b84909dee119c1bcc5a7d8d" name="lua53-lua-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.5.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
</package>
<package pkgid="837c2b42f6fb846922478798429ad20e818d271a6b802119e5fe9b56d0525271" name="lua53-lua-mpris" arch="src">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.8.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add 0003-Fix-table-function-renaming.patch to fix an error introduced
  by bad last minute refactoring (boo#1136883).</changelog>
</package>
<package pkgid="33c46823f3cea0a43e0a8814e9846c8293196c64a3228115c9d440553810bedf" name="lua53-lua-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.8.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add 0003-Fix-table-function-renaming.patch to fix an error introduced
  by bad last minute refactoring (boo#1136883).</changelog>
</package>
<package pkgid="a2975e3f919ce3fdad2a84dcf88cdf8048b9dc00263d09bf0ff0f55ae0dbdfd6" name="lxd" arch="src">
  <version epoch="0" ver="3.13" rel="lp151.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
</package>
<package pkgid="527fdfe55c3d6d5ffed88aa06837ba3a7ae8bdfa20053e6df0f67943ad475bc5" name="lxd" arch="x86_64">
  <version epoch="0" ver="3.13" rel="lp151.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
</package>
<package pkgid="12dd76e76fb8c9cb8649387b75c7882456825fb49a1b054ca07867be6f85943b" name="lxd" arch="src">
  <version epoch="0" ver="3.14" rel="lp151.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945600">- Update build to use go_nostrip, in order to attempt to fix the broken
  binaries on Leap 15.1. boo#1138769</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945601">- Update to LXD 3.14. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-14-has-been-released/5045
  boo#1138770
  + Cluster: Re-worked DNS forwarding
  + Script to factory reset LXD
  + Improvements to syscall interception
  * Lots of bug fixes...</changelog>
</package>
<package pkgid="efadd0b9d478ed5600de890a048e7d3b9d2c38d65f5fb6d9b3139328110cf804" name="lxd" arch="x86_64">
  <version epoch="0" ver="3.14" rel="lp151.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945600">- Update build to use go_nostrip, in order to attempt to fix the broken
  binaries on Leap 15.1. boo#1138769</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945601">- Update to LXD 3.14. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-14-has-been-released/5045
  boo#1138770
  + Cluster: Re-worked DNS forwarding
  + Script to factory reset LXD
  + Improvements to syscall interception
  * Lots of bug fixes...</changelog>
</package>
<package pkgid="ee36228ac219e1c67980f0d7cd37e05be9d20d035938382a2155d5cbe8b880ef" name="lxd-bash-completion" arch="noarch">
  <version epoch="0" ver="3.13" rel="lp151.2.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
</package>
<package pkgid="11adac63f73c6c36ff3fdc2bf8139e564be570f93c7d0870afc50b0bdd126680" name="lxd-bash-completion" arch="noarch">
  <version epoch="0" ver="3.14" rel="lp151.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553601600">- Initial packaging of LXD 3.11.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1553774400">- Make sqlite+dqlite both shared libs to avoid bloating RSS. In order to avoid
  issues with packaging new versions of libsqlite3 there are a bunch of
  DT_SONAME and DT_NEEDED hacks to ensure that rpm doesn't cause false-positive
  conflicts or other issues. This requires a new lxd-rpmlintrc to work on older
  SLE versions.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1554465600">- Update to LXD 3.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-12-has-been-released/4483
  + Cluster: Aggregated DHCP leases
  + Cluster: Events now show location
  + Cluster: Operations now show location
  + Cluster: Support for --target in more commands
  + Shiftfs support
  + Kernel features now exported over API
  + Improved CPU reporting
  + GPU reporting
  + Snapshot expiry now visible in lxc info
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554724800">- %pre bash features: replace by POSIX equivalents.
- %build bash features: add %_buildshell definition for it.
- Do not ignore errors from groupadd.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557403200">- Update to LXD 3.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-13-has-been-released/4738
  boo#1138031
  + Cluster: Improved heartbeat interval
  + Cluster Internal container copy
  + Initial syscall interception support
  + Role Based Access Control
  + IPVLAN support
  + Quota support on dir storage backend
  + Routes on container NIC devices
  + Configurable NAT source address
  + LXC features exported in API
  * Lots of bug fixes...</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim filler wording from description.
- Remove --with-pic which often has no point with --disable-static.
- Avoid bash-specific sh code.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Explicitly require lxcfs-hooks-lxc. LXD supports lxcfs but it requires tha
  the LXC configuration files be present.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945600">- Update build to use go_nostrip, in order to attempt to fix the broken
  binaries on Leap 15.1. boo#1138769</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560945601">- Update to LXD 3.14. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-3-14-has-been-released/5045
  boo#1138770
  + Cluster: Re-worked DNS forwarding
  + Script to factory reset LXD
  + Improvements to syscall interception
  * Lots of bug fixes...</changelog>
</package>
<package pkgid="33e51e0882b7fae2b6082188dd582b9a76dd469f73d84cd3e5e245fd30174740" name="machinery" arch="src">
  <version epoch="0" ver="1.24.1" rel="lp151.3.3.1"/>
  <changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
  <changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
  <changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
  <changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
  <changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
  <changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
  <changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
  <changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
  <changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
  <changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
  <changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
  <changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
  <changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
  <changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
  <changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
  <changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
  <changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>
  <changelog author="thardeck@suse.de" date="1511524800">- update to version 1.23.1
  * Allow inspection of old 32-bit systems which have no
    SSE instructions (gh#SUSE/machinery#2243)</changelog>
  <changelog author="thardeck@suse.de" date="1562068800">- update to version 1.24.0
  * Switch image building support from legacy Kiwi to Kiwi Next Generation
  * Allow newer json-schema releases than 2.2.5. Newer versions slow down parsing
    of manifests but newer Ruby versions have issues with old json schema releases.
    The performance issue is known upstream: (gh#ruby-json-schema/json-schema#261)
  * Fix machinery helper go version parsing (bsc#1125785)
  * Improve parsing of SSH exceptions (gh#SUSE/machinery#2257)
  * Allow inspection of old 32-bit systems even when their architecture is
    reported as i586 or i386</changelog>
  <changelog author="thardeck@suse.de" date="1562155200">- update to version 1.24.1
  * Fix HTML man page</changelog>
</package>
<package pkgid="e230b51df2b57849802ded4c51e8f49a47d525d60b59e6dec839baace63748e8" name="machinery" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="lp151.3.3.1"/>
  <changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
  <changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
  <changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
  <changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
  <changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
  <changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
  <changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
  <changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
  <changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
  <changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
  <changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
  <changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
  <changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
  <changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
  <changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
  <changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
  <changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>
  <changelog author="thardeck@suse.de" date="1511524800">- update to version 1.23.1
  * Allow inspection of old 32-bit systems which have no
    SSE instructions (gh#SUSE/machinery#2243)</changelog>
  <changelog author="thardeck@suse.de" date="1562068800">- update to version 1.24.0
  * Switch image building support from legacy Kiwi to Kiwi Next Generation
  * Allow newer json-schema releases than 2.2.5. Newer versions slow down parsing
    of manifests but newer Ruby versions have issues with old json schema releases.
    The performance issue is known upstream: (gh#ruby-json-schema/json-schema#261)
  * Fix machinery helper go version parsing (bsc#1125785)
  * Improve parsing of SSH exceptions (gh#SUSE/machinery#2257)
  * Allow inspection of old 32-bit systems even when their architecture is
    reported as i586 or i386</changelog>
  <changelog author="thardeck@suse.de" date="1562155200">- update to version 1.24.1
  * Fix HTML man page</changelog>
</package>
<package pkgid="2344512be3364535f46b9deb8573f5e9838bc4609e01cc31ac0e2b934e46ac83" name="machinery-doc" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="lp151.3.3.1"/>
  <changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
  <changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
  <changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
  <changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
  <changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
  <changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
  <changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
  <changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
  <changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
  <changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
  <changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
  <changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
  <changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
  <changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
  <changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
  <changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
  <changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>
  <changelog author="thardeck@suse.de" date="1511524800">- update to version 1.23.1
  * Allow inspection of old 32-bit systems which have no
    SSE instructions (gh#SUSE/machinery#2243)</changelog>
  <changelog author="thardeck@suse.de" date="1562068800">- update to version 1.24.0
  * Switch image building support from legacy Kiwi to Kiwi Next Generation
  * Allow newer json-schema releases than 2.2.5. Newer versions slow down parsing
    of manifests but newer Ruby versions have issues with old json schema releases.
    The performance issue is known upstream: (gh#ruby-json-schema/json-schema#261)
  * Fix machinery helper go version parsing (bsc#1125785)
  * Improve parsing of SSH exceptions (gh#SUSE/machinery#2257)
  * Allow inspection of old 32-bit systems even when their architecture is
    reported as i586 or i386</changelog>
  <changelog author="thardeck@suse.de" date="1562155200">- update to version 1.24.1
  * Fix HTML man page</changelog>
</package>
<package pkgid="6f4c7b9f901a5a46f90db81285473844c288a3876d2d25e7904e2e6038f8aa22" name="mailgraph" arch="noarch">
  <version epoch="0" ver="1.14" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1239710400">- some rpmlint fixes
  o no-changelogname-tag</changelog>
  <changelog author="chris@computersalat.de" date="1288353600">- cleanup spec
- changelog to changes file</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- fix group
  o Productivity/Networking/Diagnostic
- cleanup macros
  o buildroot</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403179200">- added mmailgraph_for_nagios-plugins-mailgraph.patch for
  nagios-plugins-mailstat package (allows to define statfile for
  nagios usage)
- specfile cleanup
- specfile license follows spdx format</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Add PreReq: %insserv_prereq: as we still install init.d services
  and handle them in post/postun scriptlets, we're also responsible
  to ensure the (outdated) tools are in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="chris@computersalat.de" date="1545393600">- fix for boo#1116020
  * add systemd support
  * add file mailgraph.service
  * set defaults in sysconfig file
- format_spec_file
- use %license
- rebase mailgraph_for_nagios-plugins-mailgraph.patch
- rework mailgraph-1.14-pl.patch
  * add support for rsyslog</changelog>
  <changelog author="lars@linux-schulserver.de - 1.14" date="1557662400">- Require perl(RRDs)
- added mailgraph-1.14-tracking.patch to stop requesting an image
  from http://oss.oetiker.ch every time the mailgraph.cgi is opened
  including new source: rrdtool.gif
- added mailgraph-1.14-add_postgrey_and_greylisting_support.patch
  which adds support (graphs) to postgrey and greylisting
- added mailgraph-1.14-add_postscreen_support.patch which handles
  postscreen in the same way as smtpd
- added mailgraph.service file -&gt; use systemd</changelog>
  <changelog author="chris@computersalat.de" date="1558094400">- merge changes
- cleanup spec
- cleanup service file
- remove perl(RRDs) cause it is Provided by rrdtool</changelog>
  <changelog author="chris@computersalat.de" date="1559044800">- change dependency of systemd to pkgconfig(systemd)</changelog>
</package>
<package pkgid="bcd2f0d6c78b46d91ea005c6828975f7a3ed262e78ee1f5b3137510b989b2400" name="mailgraph" arch="src">
  <version epoch="0" ver="1.14" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1190894400">- fixed Requires - smtpd should be postfix
- first run
- Upload to openSUSE BuildService</changelog>
  <changelog author="chris@computersalat.de" date="1190980800">- added missing rclink</changelog>
  <changelog author="chris@computersalat.de" date="1231675200">- fixed defaults
- some rpmlint fixes
  o summary-not-capitalized (Badness: 63)
  o unversioned-explicit-self-provides (Badness: 10000)</changelog>
  <changelog author="chris@computersalat.de" date="1239710400">- some rpmlint fixes
  o no-changelogname-tag</changelog>
  <changelog author="chris@computersalat.de" date="1288353600">- cleanup spec
- changelog to changes file</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- fix group
  o Productivity/Networking/Diagnostic
- cleanup macros
  o buildroot</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403179200">- added mmailgraph_for_nagios-plugins-mailgraph.patch for
  nagios-plugins-mailstat package (allows to define statfile for
  nagios usage)
- specfile cleanup
- specfile license follows spdx format</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Add PreReq: %insserv_prereq: as we still install init.d services
  and handle them in post/postun scriptlets, we're also responsible
  to ensure the (outdated) tools are in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="chris@computersalat.de" date="1545393600">- fix for boo#1116020
  * add systemd support
  * add file mailgraph.service
  * set defaults in sysconfig file
- format_spec_file
- use %license
- rebase mailgraph_for_nagios-plugins-mailgraph.patch
- rework mailgraph-1.14-pl.patch
  * add support for rsyslog</changelog>
  <changelog author="lars@linux-schulserver.de - 1.14" date="1557662400">- Require perl(RRDs)
- added mailgraph-1.14-tracking.patch to stop requesting an image
  from http://oss.oetiker.ch every time the mailgraph.cgi is opened
  including new source: rrdtool.gif
- added mailgraph-1.14-add_postgrey_and_greylisting_support.patch
  which adds support (graphs) to postgrey and greylisting
- added mailgraph-1.14-add_postscreen_support.patch which handles
  postscreen in the same way as smtpd
- added mailgraph.service file -&gt; use systemd</changelog>
  <changelog author="chris@computersalat.de" date="1558094400">- merge changes
- cleanup spec
- cleanup service file
- remove perl(RRDs) cause it is Provided by rrdtool</changelog>
  <changelog author="chris@computersalat.de" date="1559044800">- change dependency of systemd to pkgconfig(systemd)</changelog>
</package>
<package pkgid="89a28beafd9157556f261b3bc878025392e3df81ae670154fe818183c383e41d" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="d64ecf16ec9660957bdb5941294eaf6fb658e392b30e64b220735505eaf72766" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="c8ad7316b309312931625cf027bce07780fdabb6a25d49a9da5e010fb2a2be40" name="mozilla-nss" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="caeb566ccb0acca217f4d27ebc28e416afe54df1af40de991e24217e4e6191cd" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="c7dbaf45432686a55d775494ad2dbde25ffa4cdd60e7dd368d8c29369f456795" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="8263f74bb5403e498649b4e227658fed84be66257bd8be000b11a7bf4c89a227" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="46b487fcc944e102f01824570e4e8c753e5d6f305c09997396c95fb42fb4527d" name="mozilla-nss-certs" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="a6d3aae6da52a3ef7604f93eaf2c3d4ab55a01cff023325b9ec3acdb6376b715" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="d1e279a5035424cf9efc0b04c9ec07801570532ad66acae4cedf957c094b01af" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="33bdb0bae96b5a3040c9274abbf0e804ca0b18c8f93959f828b3f9150b577370" name="mozilla-nss-devel" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="d8cb666dc5f3f3fc279e84fa81bc3c940923048219a95b86fef6f36ce34231f3" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="474b94cb16d30182136e2e90983b254b677770402c6072b788d9dfeef0d1dd20" name="mozilla-nss-sysinit" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="7ac7c7ac0bc9ac6dcc0e04ee90e8bbd5f5f14fa63d014124a7c0444aa70562b3" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="4385ee71de7c608adc32044349fd67a3a1cacab979213a6e78a73c81fe13ec43" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="6fc258b3d5b94dead8ba206d1b7742c2afd55255a8359b1cc6d91f33cff1a27b" name="mozilla-nss-tools" arch="i586">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="c4695cef784cf98bf538e2f2d9586d5a6d4394e50a71d8fe5895eef3ffcacf86" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.44.1" rel="lp151.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to NSS 3.39
  * required by Firefox 63.0
  Notable bug fixes
  * NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
  New functionality
  * The tstclnt and selfserv utilities added support for configuring
    the enabled TLS signature schemes using the -J parameter.
  * NSS will use RSA-PSS keys to authenticate in TLS. Support for
    these keys is disabled by default but can be enabled using
    SSL_SignatureSchemePrefSet().
  * certutil added the ability to delete an orphan private key from
    an NSS key database.
  * Added the nss-policy-check utility, which can be used to check
    an NSS policy configuration for problems.
  * A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
  Notable changes
  * The TLS 1.3 implementation uses the final version number from
    RFC 8446.
  * Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
    where the DigestInfo structure was missing the NULL parameter.
    Starting with version 3.39, NSS requires the encoding to contain
    the NULL parameter.
  * The tstclnt and selfserv test utilities no longer accept the -z
    parameter, as support for TLS compression was removed in a
    previous NSS version.
  * The CA certificates list was updated to version 2.26.
  * The following CA certificates were Added:
  - OU = GlobalSign Root CA - R6
  - CN = OISTE WISeKey Global Root GC CA
  * The following CA certificate was Removed:
  - CN = ComSign
  * The following CA certificates had the Websites trust bit disabled:
  - CN = Certplus Root CA G1
  - CN = Certplus Root CA G2
  - CN = OpenTrust Root CA G1
  - CN = OpenTrust Root CA G2
  - CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
  * required by Firefox 62.0
  New Functionality
  * Added support for the TLS Record Size Limit Extension
  * When creating a certificate request (CSR) using certutil -R, an
    existing orphan private key can be reused. Parameter -k may be
    used to specify the ID of an existing orphan key. The available
    orphan key IDs can be displayed using command certutil -K.
  * When using certutil -O to print the chain for a given certificate
    nickname, the new parameter --simple-self-signed may be provided,
    which can avoid ambiguous output in some scenarios.
  New Functions
  * SECITEM_MakeItem - Allocate and make an item with the requested contents
    (secitem.h)
  New Macros
  * SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
    Extension (in ssl.h)
  Notable Changes
  * Fixed CVE-2018-0495 (bmo#1464971)
  * Various security fixes in the ASN.1 code
  * NSS automatically enables caching for SQL database storage on
    Linux, if it is located on a network filesystem that's known to
    benefit from caching.
  * When repeatedly importing the same certificate into an SQL database,
    the existing nickname will be kept.
- update to NSS 3.37.3
  * required by Firefox 61.0
  Notable changes:
  * The TLS 1.3 implementation was updated to Draft 28.
  * Added HACL* Poly1305 32-bit
  * The code to support the NPN protocol has been fully removed.
  * NSS allows servers now to register ALPN handling callbacks to
    select a protocol.
  * NSS supports opening SQL databases in read-only mode.
  * On Linux, some build configurations can use glibc's function
    getentropy(), which uses the kernel's getrandom() function.
  * The CA list was updated to version 2.24, which removed the
    following CA certificates:
  - CN = S-TRUST Universal Root CA
  - CN = TC TrustCenter Class 3 CA II
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  * Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64</changelog>
  <changelog author="cgrobertson@suse.com" date="1544702400">- update to NSS 3.40.1
  * required by Firefox 64.0
  * patch release fixes CVE-2018-12404
  Notable bug fixes
  * FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
  New functionality
  * The draft-00 version of encrypted SNI support is implemented
  * tstclnt now takes -N option to specify encrypted SNI key
  Notable changes
  * The mozilla::pkix library has been ported from Mozilla PSM to NSS.
    This is a C++ library for building certification paths.
    mozilla::pkix APIs are not exposed in the libraries NSS builds.
  * It is easier to build NSS on Windows in mozilla-build environments
  * The following CA certificates were Removed:
    CN = Visa eCommerce Root</changelog>
  <changelog author="cgrobertson@suse.com" date="1547121600">- hmac packages inadvertently removed in last update: re-added.
    (bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
    packages to avoid dependency issues during updates
    (bsc#1090767, bsc#1121045)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
</package>
<package pkgid="53d8b6dd11af2410d24409f0fd51542926139f084cd207a12fe223d91dad510f" name="mpv-plugin-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.5.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
</package>
<package pkgid="9d38f6ad9f388356f1f01d51222cd5b87eca1d418a8f4929ebd41c8cc16f4adc" name="mpv-plugin-mpris" arch="x86_64">
  <version epoch="0" ver="0.0+git20170918.28b1c75" rel="lp151.5.8.1"/>
  <changelog author="alarrosa@suse.com" date="1503057600">- Initial release</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503230400">- Update to version 0.0+git20170820.2126067:
  * Initialize the mpris:artUrl and xesam:url variables for all files</changelog>
  <changelog author="alarrosa@suse.com" date="1503316800">- Install LICENSE file</changelog>
  <changelog author="alarrosa@suse.com" date="1503489600">- Add %defattr to set the right attributes to files and don't try to
  own any mpv directory on Tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Fix build on Tumbleweed as it otherwise still does not find the
  folder</changelog>
  <changelog author="alarrosa@suse.com" date="1505736000">- Update to version 0.0+git20170918.28b1c75:
  * Check if the table parameter of table_contains is nil</changelog>
  <changelog author="jmatejek@suse.com" date="1509364800">- do not build for Lua 5.2</changelog>
  <changelog author="jberry@suse.com" date="1524744000">- Only produce mpv-plugin-mpris during one flavor to avoid duplicate binary.</changelog>
  <changelog author="alarrosa@suse.com" date="1525089600">- Since mpv uses lua 5.1, we better build mpv-plugin-mpris only
  for the lua51 flavor instead of building it only for lua53. Otherwise
  the package is useless.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559217600">- Add 0001-Fix-crash-when-media-file-doesnt-have-utf8-encoded-metadata.patch
  to fix crash when media file doesn't have utf8 encoded metadata
  (boo#1136883)
- Use %license</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1559304000">- Add 0002-Replace-the-fix-for-invalid-utf-8-characters-with-a-proper-fix.patch
  to properly fix boo#1136883 since the previous patch only fixed some
  cases (and broke others).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add 0003-Fix-table-function-renaming.patch to fix an error introduced
  by bad last minute refactoring (boo#1136883).</changelog>
</package>
<package pkgid="62432d623a67b31ff6d5de801584eb850ef4fcfb4603752b9c1cc6f317fb716d" name="mumble" arch="i586">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="52b3adb26cbe174b868d058d2de8e711ff3c862f668db02176f46792fc1ab13b" name="mumble" arch="src">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="3ffc3674af13d1372b0edb990258f2cf4a7ac5eff97bf01c1826eedfacb06cf8" name="mumble" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="3d526b904d2a5e9b454f4dac1e7aa3ca39f702895cbd05328a32501fbf1f0fd4" name="mumble" arch="i586">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="9a9343d5a2422fc4553d256b5cb5eb239304e350473daf9d4a2aa9ecc89db597" name="mumble" arch="src">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="7839e63ca70ac65fcbd5557d0e7b34aec20c10bbb6e8d319eacd022091c4026e" name="mumble" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="689158e136635721c2ce7614c5cc64cbfd8a89870c80a346d8524c2dc2d5bc4a" name="mumble-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="5653dda5002b693b6d915485a358f653e386e9296f0611fd8e4eab07fe523a41" name="mumble-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="e0fc695a0c374fb74873b45b1b17f1ba51d7b44a567ba9862ccca2882b02c841" name="mumble-server" arch="i586">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="0fd462146156c53696d7100fb40ba2d0864a43b1eea7cf7e1d050daa6dc86764" name="mumble-server" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Add pkgconfig(speexdsp) BuildRequires: its presence is checked
  for by the build system.</changelog>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
</package>
<package pkgid="2a962033cd1911c290a66e69bf4f91a1a5f5acef2b7c2df68a6d49f1ecf1c218" name="mumble-server" arch="i586">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="c7d0468d5df2640aba3681b2c218fcc88bb6354163d62a1d8e0450075aa3c2b8" name="mumble-server" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp151.4.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1426680000">- Added speech-dispatcher support for openSUSE (Text-To-Speech)</changelog>
  <changelog author="mailaender@opensuse.org" date="1434628800">- update to 1.2.9 maintenance release
- remove redundant clean section
- add missing service_add_pre macro
- gpg key has changed</changelog>
  <changelog author="astieger@suse.com" date="1444737600">- update to 1.2.10:
  * no code change, other than to create another binary release
    for platforms other than GNU/Linux with updated libraries</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- update to 1.2.11:
  * Fixed a bug where Mumble global shortcuts on X11 would not
    release properly when Chrome/Chromium was the frontmost application.
  * Fixed a bug where clients would automatically reconnect after
    being kicked.
  * Inserting an image in the chat should now always cause Mumble
    to scroll correctly to the bottom of the log.
  * Opening mumble:// URLs should now correctly allow people to
    change channels if a URL is opened while Mumble is running.
  * Fixed an issue where the ?shortcut/linux/evdev/enable? config
    option was not saved correctly, and overwritten when closing
    Mumble.</changelog>
  <changelog author="rpm@fthiessen.de" date="1450094401">- Removed unneeded patch for SLE10: mumble-1.1.4-sle10glx.diff
- Added patch from RandyBB (roman@priesol.net) to fix missing
  semicolons in desktop file: mumble-1.2.11-desktop_fix.diff
- Removed parts for outdated openSUSE versions, older then openSUSE
  12.2 or SLE 11, from spec file</changelog>
  <changelog author="astieger@suse.com" date="1451908800">- mumble 1.2.12:
  * The log would always scroll-to-bottom, even if manually
    scrolled up to view a previous message. Scroll-to-bottom is now
    only triggered if the log view has not manually scrolled by the
    user.
  * Fixed a bug where a stale overlay client could cause the Mumble
    UI to freeze under some circumstances.
  * Fixed a bug where CELT and Opus encoders were not properly
    reset when using more than one frame per packet in Mumble. This
    would previously cause noisy artifacts at the beginning of
    transmissions.</changelog>
  <changelog author="astieger@suse.com" date="1452513600">- mumble 1.2.13:
  * Fix Murmur DoS (Mumble-SA-2016-001), does not affect GNU/Linux
- update upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1457870400">- mumble 1.2.15:
  * Add ability to disable the public server list
  * Add ability to create and/or edit Mumble?s server list
- includes changes from 1.2.14:
  * Fix regression crash on exit for in overlay feature</changelog>
  <changelog author="mailaender@opensuse.org" date="1462536000">- mumble 1.2.16
  * Mumble will no longer try to poll for changes in XInput button
    state when no controllers are connected.
  * The last references (public server list registration and crash
    reporting) to the old domain name for the Mumble service host,
    ?mumble.hive.no?, have been changed to use ?mumble.info? instead.
  * The overlay blacklist from 1.3.0 snapshots has been backported.
- add (/var)/run/mumble-server as temporary file for proper cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Fixed build on 13.1 by only adding (/var)/run/mumble-server
  as temporary file only on newer openSUSE versions (&gt; 1310)</changelog>
  <changelog author="mailaender@opensuse.org" date="1474804800">- Update to version 1.2.17
  * Fixed a bug that could cause the Mumble log view to be
    inacessible after receiving a specially crafted text message.
  * The PulseAudio backend will now fall back to default device
    if the chosen device is no longer present.
  * Mumble now explicitly sends plain text notifications to KDE
    and Freedesktop.org notification endpoints.
  * Xbox button/controller names as shown by Mumble should now be
    correct for controllers other than the first controller.
- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="dmueller@suse.com" date="1482148800">- update to 1.2.18:
  - mostly non-Linux fixes
  - switch default compiler to use C++03</changelog>
  <changelog author="mailaender@opensuse.org" date="1485691200">- update to 1.2.19:
  * Murmur?s -limits command will now print output as it runs, instead of at exit.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1496923200">- Add initialize-soundfile-format.patch to initilalize a variable so
  it's not used later uninitialized.</changelog>
  <changelog author="kwalter@suse.com" date="1514980800">- Add 0001-AudioOutput-do-not-use-non-existant-template-version.patch
  to fix tumbleweed compilation</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1539950400">- build with -std=c++1z on TW since it applies -Wfatal-error that
  conflicts with -std=c++98</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update murmurd AppArmor profile
  - update bash path for usrMerge (boo#1132350)
  - use abstractions/openssl instead of a rule for openssl.cnf</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559736000">- Add add-speechd-include-path.patch to fix speechd include paths
- Enable speechd everywhere now</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1562932800">- Added patches to fix boo#1123334 (CVE-2018-20743), instability
  and crash due to crafted message flooding
  * added mumble-1.2.19-limit-amount-of-messages.patch (backported
    version of upstream patch)
  * added mumble-1.2.19-stricter-message-limit.patch (backported
    version of upstream patch)</changelog>
</package>
<package pkgid="e2cb53edae109081a67132fa865f60ab3a53acbb73537c4f9a7b0079498a6142" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="514609cc8bda10b4daf36074addf773d931a529447fcc86a014ea8fb51947db5" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="ba129fba906f86042e05ea8a4dcc25b408bcb8bcecd8b43a1b62bfa847286689" name="mutter-data" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="55469827dddcd4fc35513b61041e0afc3b7b0143ae8baa7c8c27cddecd26aacc" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="f90b4904bc33fcdb4e4253caa4d2c8028f9c4c450231a448a4b635fe4db0899d" name="mutter-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180207.4b2d21ff0" rel="lp151.8.3.1"/>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add mutter-monitor-config-manager-rotation-fix.patch: Fix
  transformation when rotating screen so that rotation by 90/270
  deg don't show a black screen; patch taken from upstream git
  (bgo#787836).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506340801">- Add mutter-fix-hidpi-scaling-x11.patch: Fix hidpi scaling
  regression when using X11 (bgo#788049).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1506945600">- Add mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch:
  Implement _NET_RESTACK_WINDOW and respect sibling field of
  XConfigureRequestEvent. This way X11 window stack operations work
  as expected.
  (bsc#1052058, bgo#786363, bgo#786365)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Fix crash when respawning shortcut inhibitor dialog
    (bgo#787568).
  + Fix crash during monitor configuration migration (bgo#787668).
  + Fix multihead regressions in X11 session (bgo#787477).
  + Fix screen rotation regressions (bgo#787836).
  + Fix keybindings not being resolved with non-latin layouts
    (bgo#787016).
  + Support snap packages for sandboxed app IDs (bgo#788217).
  + Fix crash when reconnecting tablet device (bgo#787649).
  + Support running headless (bgo#730551, bgo#787637).
  + Support _NET_RESTACK_WINDOW and ConfigureRequest siblings
    (bgo#786365).
  + Fix monitor layout not being remembered across sessions
    (bgo#787629).
  + Make sure to export _NET_NUMBER_OF_DESKTOPS (bgo#760651).
  + Allow resizing of tiled windows (bgo#645153).
  + Export tiling information to clients (bgo#751857).
  + Misc. bug fixes: bgo#787570, bgo#787715, bgo#787953,
    bgo#788049, bgo#788199, bgo#788292, bgo#788197.
  + Updated translations.
- Drop upstream fixed patches:
  + mutter-wayland-fixes.patch.
  + mutter-monitor-refresh-rate.patch.
  + mutter-fix-kinetic-scrolling.patch.
  + mutter-monitor-config-manager-rotation-fix.patch.
  + mutter-fix-hidpi-scaling-x11.patch.
  + mutter-bsc1052058-NET_RESTACK_WINDOW-Respect-sibling.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507636800">- Add mutter-wayland-dma-buf-modifiers-fix.patch: Don't send
  modifiers to old clients (bgo#788558).
- Add  mutter-x11-Protect-XChangeProperty-call.patch: Protect
  XChangeProperty call with error traps (bgo#788666).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add mutter-handle-no-to-no-monitor.patch: fix possible crash when
  turning monitor off and on while logged in (bgo#788607).
- Add mutter-preferred-mode.patch: fix a crash on some ATI (radeon)
  configurations (bgo#789153).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Work with clients that require older linux_dmabuf protocol
    (bgo#788558).
  + Prevent crash when closing maximized windows (bgo#788666).
  + Use the correct monitor for HiDPI scaling of shell chrome
    (bgo#788820).
  + Enable XWayland core dumps (bgo#789086).
  + Fixes:
  - Unredirection of fullscreen windows (bgo#788493).
  - List of supported monitor scales on X11 (bgo#788901).
  - Handling of trackball settings on wayland (bgo#787804).
  - Miscellaneous:
    . Multi-monitor regressions and crashes (bgo#788607,
    bgo#788860, bgo#789153, bgo#786929, bgo#789501).
    . Bug fixes: bgo#788572, bgo#788569, bgo#784314, bgo#789227,
    bgo#789223, bgo#782344, bgo#789552, bgo#789553, bgo#789300.
  + Updated translations.
- Drop fixed upstream patches:
  mutter-wayland-dma-buf-modifiers-fix.patch,
  mutter-x11-Protect-XChangeProperty-call.patch,
  mutter-handle-no-to-no-monitor.patch and
  mutter-preferred-mode.patch.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Point fdupes to the /usr directory instead of the build root,
  which is a practice that must be avoided.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171231.0bd1d7cf0:
  + Revert "window: Raise and lower tile match in tandem".
  + wayland: Only send full sequences of touch events to clients.
  + stage: Push framebuffer before setting up viewport.
  + keybindings: Only add multiple keycodes from the same level.
  + wayland-outputs: Delay wl_output destruction.
  + monitor-manager-kms:
  - Fix recently introduced build issue.
  - poll() on KMS fd on EAGAIN.
  + compositor: reset top_window_actor and remove it from windows
    when destroyed.
  + monitor-manager: Compare keys when checking whether a config is
    complete.
  + Updated translations.
- Switch to git-checkout via source services.
- Following the above, add intltool and libtool BuildRequires and
  pass autogen.sh to bootstrap the generated tarball.
- Pkgconfigy the BuildRequires, replace:
  gobject-introspection-devel, libSM-devel, libX11-devel and
  libXinerama-devel with pkgconfig(gobject-introspection-1.0),
  pkgconfig(sm), pkgconfig(x11) and pkgconfig(xinerama).
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop_file macro, no longer needed.
- Drop pkgconfig(gbm) BuildRequires listed twice.
- Run spec-cleaner, modernize spec, use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180127.d32d358a6:
  + monitor: Set MINIMUM_LOGICAL_HEIGHT to 480.
  + Don't attempt to get monitor geometry on non-existent monitors.
  + wayland:
  - Shortcuts inhibitor requires a window.
  - Ensure wl_shell_surfaces are set reactive.
  - Only send full sequences of touch events to clients.
  + input-settings/x11: Fix tap-and-drag libinput property name
  + clutter/evdev: Ignore unknown touch points
  + Revert "window: Raise and lower tile match in tandem"
  + Updated translations.
- Update _service url to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518955200">- Update to version 3.26.2+20180207.4b2d21ff0:
  + renderer/x11: Enable GPU memory purge error extension if
    available (bgo#739178).
  + cogl/x11/renderer: Silence introspection warning (bgo#739178).
  + backends/x11: Preserve XI1 XDevice throughout
    ClutterInputDevice lifetime (glgo#mutter#7).</changelog>
  <changelog author="fcrozat@suse.com" date="1519819200">- Add mutter-force-rgb8.patch: force 8-bit RGB EGL config,
  to prevent slowness when using Wayland with 10-bit display
  (bsc#1081931 glgo#GNOME/mutter#2).</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add mutter-xwayland-use-gdm-auth-file.patch (bsc#1084737): If
  an Xauthority file was created for us by the display manager,
  pass it to Xwayland -auth.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720001">- Retire mutter-xwayland-use-gdm-auth-file.patch in favor of
  mutter-xwayland-create-xauthority.patch (bsc#1084737). We now
  create the cookie in mutter itself.</changelog>
  <changelog author="hpj@suse.com" date="1544443200">- Add mutter-bsc1093541-fix-window-icon-leak.patch (bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1545825600">- Add mutter-bring-back-cursor-when-using-magnifier.patch: cursor is
  missing when using magnifier on 3.26, this patch contains 6 commits
  from mutter-3.27.91 (bgo#754806, bsc#1120290).</changelog>
  <changelog author="xwang@suse.com" date="1547726400">- Add mutter-xwayland-Don-t-abort-if-Xwayland-crashes.patch: make
  mutter exit instead of crash if Xwayland goes away unexpectedly.
  upstream commit 2d80fd (glgo#GNOME/mutter!76).</changelog>
  <changelog author="qkzhu@suse.com" date="1548936000">- Add mutter-keybindings-Super-should-be-inhibitable.patch: when a
  Wayland client issues a shortcut inhibit request which is granted
  by the user, the Super key should be passed to the surface instead
  of being handled by the compositor (bgo#790627, bsc#1120372).</changelog>
  <changelog author="qkzhu@suse.com" date="1550664000">- Add mutter-Lower-HIDPI_LIMIT-to-144.patch: mutter will set scaling
  factor to 2 when the monitor's dpi is greater than 144 (96*1.5) to
  keep GNOME's behavior consistent with YaST Installer (fate#326682,
  bsc#1125467).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557144000">- Add mutter-bsc1133445-Fix-time-comparison-bug-causing-hang.patch:
  A comparison in translate_device_event() does not account for the
  fact that X's clock wraps about every 49.7 days.  When triggered,
  this causes an unresponsive GUI (bsc#1133445, glgo#GNOME/mutter#12).</changelog>
</package>
<package pkgid="ea66264c14604b7625f2076e2c0dd3720b414f0685cd414ed8199e13dc4f93da" name="nautilus-evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="9cf495c3b506150e590cebc7ef4183889bfbf4fef73a4ad36900ecc4b8a844f7" name="ncat" arch="x86_64">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="72486205b90e096dce6aa8e65739a7120a2f380e8efbcf75c5e50cb3820ce5e6" name="ndiff" arch="x86_64">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="00e104766a998d5d0e8781731e8902f8b79ab57166da2cfd383a070a65e7109c" name="neovim" arch="src">
  <version epoch="0" ver="0.3.5" rel="lp151.2.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1512302400">- Make build result independent from build hostname and username</changelog>
  <changelog author="mliska@suse.cz" date="1527076800">- Require libtermkey version &gt;= 0.20.</changelog>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539200">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="6140fca3c44dcab2604b6d50ec44f59a405c943b863fa9ff0a7010f65d61a933" name="neovim" arch="x86_64">
  <version epoch="0" ver="0.3.5" rel="lp151.2.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1512302400">- Make build result independent from build hostname and username</changelog>
  <changelog author="mliska@suse.cz" date="1527076800">- Require libtermkey version &gt;= 0.20.</changelog>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539200">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="8223a5947a737e5ab0157c378436d215ba4ab4cbd5c882977d8bca5087fb2684" name="neovim" arch="src">
  <version epoch="0" ver="0.3.7" rel="lp151.2.7.1"/>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Update to version 0.3.5.</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539201">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1559131200">- Update to version 0.3.7:
  * 4553fc5 #10082 vim-patch:8.1.1365: :source should check sandbox
    (CVE-2019-12735 boo#1137443), removed CVE-2019-12735.patch
  * 877d539 #10027 genappimage.sh: migrate to linuxdeploy</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="bfa88865cb02c402428d7ff153107708960d0378d7bcfe6e92b311a07328db93" name="neovim" arch="x86_64">
  <version epoch="0" ver="0.3.7" rel="lp151.2.7.1"/>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Update to version 0.3.5.</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539201">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1559131200">- Update to version 0.3.7:
  * 4553fc5 #10082 vim-patch:8.1.1365: :source should check sandbox
    (CVE-2019-12735 boo#1137443), removed CVE-2019-12735.patch
  * 877d539 #10027 genappimage.sh: migrate to linuxdeploy</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="5ea03a0faa2ef1d35c647bed3f5c6453e43d313dbab6df99268101a424580b54" name="neovim-lang" arch="noarch">
  <version epoch="0" ver="0.3.5" rel="lp151.2.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1512302400">- Make build result independent from build hostname and username</changelog>
  <changelog author="mliska@suse.cz" date="1527076800">- Require libtermkey version &gt;= 0.20.</changelog>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539200">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="2ec41c06763fb9fbb11df5cd41f2f0685006bbf95f1ac6f12f56d5d237ff92b9" name="neovim-lang" arch="noarch">
  <version epoch="0" ver="0.3.7" rel="lp151.2.7.1"/>
  <changelog author="mliska@suse.cz" date="1527249600">- The library bump fixes boo#1094627.</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1528372800">- Add a support for update-alternatives, so users can change their
  "vim" to neovim
- Mark LICENSE file as %license</changelog>
  <changelog author="asn@cryptomilk.org" date="1528718400">- Update to version 0.3.0</changelog>
  <changelog author="mliska@suse.cz" date="1528804800">- Remove update-alternatives as it's not 1:1.
  Upstream is not willing to do that:
  https://github.com/neovim/neovim/issues/8535</changelog>
  <changelog author="mliska@suse.cz" date="1531742400">- Require exact version of libtermkey1 because it does not
  bump SONAME (boo#1100496).</changelog>
  <changelog author="ronisbr@gmail.com" date="1532260800">- Update to version 0.3.1:
  * Features
  - 07499a8 #8709 man.vim: C highlighting for EXAMPLES section
  - 07f82ad #8699 TUI: urxvt: also send xterm focus-reporting
    seqs
  - 40911e4 #8616 API: emit nvim_buf_lines_event from :terminal
  - c46997a #8546 fillchars: Add "eob" flag
  * Fixes
  - 74d19f6 #8576 startup: avoid blank stdin buffer if other
    files were opened
  - 4874214 #8737 Only waitpid() for processes that we care about
  - cd6e7e8 #8743 Check all child processes for exit in SIGCHLD
    handler
  - c230ef2 #8746 channel.c: Prevent channel_destroy_early() from
    freeing uninitialized rpc stuff
  - 0ed8b12 #8681 transstr_buf: fix length comparison
  - d241f27 #8708 TUI: Fix standout mode
  - 9afed40 #8698 man.vim: fix for mandoc
  - e889640 #8682 provider/node: npm --loglevel silent
  - 1cbc830 #8613 API: nvim_win_set_cursor: set curswant
  - bf6048e #8628 checkhealth: Python: fix VIRTUAL_ENV check
  - 3cc3506 #8528 checkhealth: node.js: also search yarn
  * Changes
  - b751449 #8619 defaults: shortmess+=F
  - 1248178 #8578 highlight: high-priority CursorLine if fg is
    set.
  - 01570f1 #8726 terminal: handle &amp;confirm and :confirm on
    unloading
  - 56065bb #8721 screen: truncate showmode messages
  - bf2460e #7551 buffer: fix copying :setlocal options
  - c1c14fa #8520 Ex mode: always "improved" (gQ)
  - 050f397 #7992 options: remove 'maxcombine` option (always 6)
  * Internal
  - 463da84 #7992 screen: use UTF-8 representation</changelog>
  <changelog author="mcepl@suse.com" date="1534420800">- Add default system-wide configuration file to /etc/xdg/nvim/init.vim (boo#1098800)
- Add proper location of the default SPEC file templates
- Add some packages needed for more robust builds
  * neovim.patch fix building system
  * neovim-0.1.7-bitop.patch for use external bit module
  * neovim-0.2.0-gcc-prototype.patch fix build issue on ppc64</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1534593600">- Proper name of the systemwide configuration file is sysinit.vim not
  init.vim and it should be stored in /usr/share/nvim/sysinit.vim not in
  /etc/xdg/nvim.</changelog>
  <changelog author="mcepl@suse.com" date="1535198400">- Put the system-wide config in /etc, and just a symlink to $VIM
  (hopefully finally fixes boo#1098800)</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1538481600">- Switch used to LuaJIT and run SPEC file through spec-cleaner.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544097600">- Use cmake macro for building</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1545307200">- Add to the system-wide configuration file extension of runtimepath by
  /usr/share/vim/site, so that neovim uses other Vim plugins installed
  from packages.
- Add /usr/share/vim/site tree of directories to be owned by neovim as
  well.</changelog>
  <changelog author="sean@suspend.net" date="1546257600">- Update to version 0.3.2:
  * Features
  - clipboard: support Custom VimL functions (#9304)
  - win/TUI: improve terminal/console support (#9401)
  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists (#9077)
  - support mapping in more places (#9299)
  - diff/highlight: show underline for low-priority CursorLine (#9028)
  - signs: Add "nuhml" argument (#9113)
  - clipboard: support Wayland (#9230)
  - TUI: add support for undercurl and underline color (#9052)
  - man.vim: soft (dynamic) wrap (#9023)
  * API
  - API: implement object namespaces (#6920)
  - API: implement nvim_win_set_buf() (#9100)
  - API: virtual text annotations (nvim_buf_set_virtual_text) (#8180)
  - API: add nvim_buf_is_loaded() (#8660)
  - API: nvm_buf_get_offset_for_line (#8221)
  - API/UI: ext_newgrid, ext_histate (#8221)
  * UI
  - TUI: use BCE again more often (smoother resize) (#8806)
  - screen: add missing status redraw when redraw_later(CLEAR) was used (#9315)
  - TUI: clip invalid regions on resize (#8779)
  - TUI: improvements for scrolling and clearing (#9193)
  - TUI: disable clearing almost everywhere (#9143)
  - TUI: always use safe cursor movement after resize (#9079)
  - ui_options: also send when starting or from OptionSet (#9211)
  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)
  - Don't erase screen on :hi Normal during startup (#9021)
  - TUI: Hint wrapped lines to terminals (#8915)
  * FIXES
  - RPC: turn errors from async calls into notifications
  - TUI: Restore terminal title via "title stacking" (#9407)
  - genappimage: Unset $ARGV0 at invocation (#9376)
  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)
  - provider: improve error message (#9344)
  - runtime/syntax: Fix highlighting of autogroup contents (#9328)
  - VimL/confirm(): Show dialog even if :silent (#9297)
  - clipboard: prefer xclip (#9302)
  - provider/nodejs: fix npm, yarn detection
  - channel: avoid buffering output when only terminal is active (#9218)
  - ruby: detect rbenv shims for other versions (#8733)
  - third party/unibilium: Fix parsing of extended capabilitiy entries (#9123)
  - jobstart(): Fix hang on non-executable cwd (#9204)
  - provide/nodejs: Simultaneously query npm and yarn (#9054)
  - undo: Fix infinite loop if undo_read_byte returns EOF (#2880)
  - 'swapfile: always show dialog' (#9034)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1546430400">- Remove not used neovim-0.3.1.tar.gz.</changelog>
  <changelog author="sean@suspend.net" date="1546776000">- Update to version 0.3.3:
  * Fixes
  - Merge pull request from jamessan/revert-pynvim
  - health/provider: Check for available pynvim when neovim mod
    is missing
  - python#CheckForModule: Use the given module string instead
    of hard-coding pynvim
  - (health.provider)/python: Import the neovim, rather than
    pynvim, module
  - #9423 TUI: Konsole DECSCUSR fixup</changelog>
  <changelog author="seanlew@opensuse.org" date="1547380800">- Update to version 0.3.4:
  * Merge pull request #9492 from bfredl/cul_cole
  * test: add tests for conceal cursor movement
  * display: unify ursorline and concealcursor redraw logic
  * Merge pull request #9490 from bfredl/vim-patch-8.1.0726</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556539200">- Update to version 0.3.5.</changelog>
  <changelog author="Chris Coutinho &lt;c.coutinho@redstack.nl&gt;" date="1556539201">- Update to version 0.3.5:
  Maintenance release to fix issues found in v0.3.4:
  * f891131 #9894 options: properly reset directories on 'autochdir'
  * 9a5488c Remove MSVC optimization workaround for SHM_ALL
  * 1793ba8 Make SHM_ALL to a variable instead of a compound literal #define
  * 947069b doc: mention "pynvim" module rename
  * 46c7e12 #9629 screen: don't crash when drawing popupmenu with 'rightleft' option
  * f1843c0 vim-patch:8.1.0677: look-behind match may use the wrong line number
  * 1204421 #8325 :terminal : set topline based on window height
  * aaa8c3d #9504 :recover : Fix crash on non-existent *.swp</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1559131200">- Update to version 0.3.7:
  * 4553fc5 #10082 vim-patch:8.1.1365: :source should check sandbox
    (CVE-2019-12735 boo#1137443), removed CVE-2019-12735.patch
  * 877d539 #10027 genappimage.sh: migrate to linuxdeploy</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559822400">- boo#1137443: Add CVE-2019-12735.patch fixing the security bug
  "Modelines allow arbitrary code execution".</changelog>
</package>
<package pkgid="8afe494e67a67cd9480b589329c2894f8f63ad94169c5e3dfa9193dd8fd97b53" name="netpbm" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="062e1a025d6b1f4e0193ddedded94aa2cd600ae04c978ee9d32eea6c20cd15e6" name="netpbm" arch="src">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 10.66.3
  * sgitopnm: fix bug: no output if input is RLE compressed.
  * jpegtopnm -dumpexif: fix incorrect display of resolution.
  * jpegtopnm -dumpexif: fix truncated make, model, or datetime.
  * jpegtopnm -dumpexif: fix wild pointer with invalid EXIF data.
  * build fixes</changelog>
  <changelog author="coolo@suse.com" date="1409400000">- fix license for spdx 1.2 (IJG is now part of it, loosing SUSE prefix)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410177600">- minor: man pages from section 3 are developer docs, move
  to -devel package</changelog>
  <changelog author="pgajdos@suse.com" date="1410177601">- updated to 10.67.4
  * pcdovtoppm: Fix crash due to invalid operator == on some
    systems.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * sgitopnm: add ability to convert 2-channel SGI image.
    Thanks Prophet of the Way &lt;afu@wta.att.ne.jp&gt;.
  * etc. see HISTORY
- modified patches:
  * netpbm-make.patch (refreshed)
  * netpbm-security-code.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="0ce259923fe5d914899644dee049b350ef81be2f97ef21fda1900eb447c9f2e1" name="netpbm" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="6a7e2d3b90733516baeae490e4c92b8c0abb012cbdfb83d721167ce475ebe4fb" name="netpbm-vulnerable" arch="i586">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="2e4f1ee192eb087626ba97e193e4f91c64441c407b70830ee8b260f647d5c25b" name="netpbm-vulnerable" arch="x86_64">
  <version epoch="0" ver="10.80.1" rel="lp151.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416398400">- updated to 10.68.1
  * pnmconvol: add -bias .
  * Remove pnmcomp, install a pnmcomp symlink for pamcomp.
  * Fix incorrect option parsing when there are multiple common
    options (e.g. -plain -quiet).
  * cameratopam: fix buffer overflow.
  * cameratopam: fix incorrect output.
  * ppmtopict: Fix unconditional crash.</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 10.70.4
  * pambackground: fix bug: segfault or incorrect results in most
    cases.
  * ppmtoarbtxt: Fix some undefined behavior when program limits
    are exceeded.
  * anytopnm: convert all images in a multi-image GIF instead of
    just the first.
  * nmnorm: add -bsingle, -wsingle.
  * pamtosvg: fix use of unset variable; probably results in a
    crash.
  * pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
    nearly always.
  * pamtilt: fix bug: unconditional crash.
  * pgmmorphconv: fix bug: always produces PGM Plain format.
  * giftopnm: Fix bug: crashes if purported GIF has neither a global
    color map nor a local one.
  * pgmmorphconv: add -gradient.
  * pnmhisteq: add -noblack and -nowhite.
  * tifftopnm: allow input file to be nonseekable.
  * Add yuy2topam.
  * Add pgmtosbig.
  * Add st4topgm, pgmtost4.
  * ppmtoarbtxt: fix bug: wrong output when high numbers represent
    darker.
  * ppmtorgb3: Fix buffer overflow with long input file name.
  * st4topgm: Fix bug: with no argument, uses file named "'" instead
    of Standard Input.
  * pnmconvol: Fix bug: wrong output for pixels that convolve to
    negative values (should be clipped to zero).</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1435060800">- Drop all libp?m.so symlinks</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 10.72.4
  * see HISTORY for upstrem changelog
  * added useful returns
    + netpbm-gcc-warnings.patch
  * forwardported
    . netpbm-security-code.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471867200">- updated to 10.75.1
  * see HISTORY for upstream changelog
  * refreshed, reduced, extended patches:
    netpbm-security-code.patch
    netpbm-security-scripts.patch
    netpbm-gcc-warnings.patch</changelog>
  <changelog author="fstrba@suse.com" date="1477396800">- Added patch:
  * netpbm-jasper.patch
    + Fix build with newer jasper</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 10.76.0
  * pnmquantall: Fix failure when temporary file location is
    not the same filesystem as the output file.
  * pnmquantall: Fix incorrect handling of when the Pnmremap or
    the final rename fails.
  * giftopnm: Fix bug: crash on little-endian computers that can't
    toleration unaligned memory access.  Thanks Ignatios Souvatzis
    (is@netbsd.org).  Broken in Netpbm 10.47 (June 2009).
  * cmuwmtopbm: fix trivial memory leak.  Always broken (cmuwmtopbm
    was in primordial Pbmplus, in 1988).
  * Build: tifftopnm.c: fix undefined WIFSIGNALED, etc.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- updated to 10.78.4
  * pamcrater: fix incorrect output with non-square image.
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.
  * fix incorrect output with -mixtransparency.
  * pamcomp: remove debug trace message with -mixtransparency.
  * pnmtojpeg: fix array bounds violation in argument list.
  * ppmpat: Add -color.
  * ppmpat: Add -argyle1, -argyle2.
  * pnmtotiff: Fail with -miniswhite or -minisblack on color image
    rather than produce an invalid TIFF.
  * tifftopnmcmyk: Default rows per strip to the TIFF library
    default instead of whatever yields 8K strips.
  * tifftonm: Fix incorrect PBM output with two-color paletted TIFF
    image.
  * tifftopnm: Fix memory corruption when image is more pixels than
    can be represented as a C unsigned integer.
  * tifftopnmcmyk: Fix bug: fails with very wide images and no
  - rowsperstrip.
  * svgtopam: Fix crash when out of memory.
  * pnmcrop: Add -closeness
  * libnetpbm: ppmd_fill_path: remove debug trace.
  * pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
  * --version global option: with SOURCE_DATE_EPOCH environment
    variable, display source code datetime instead of build
    datetime.</changelog>
  <changelog author="pgajdos@suse.com" date="1497009600">- updated to 10.78.5
  * pamgauss: Fix skewed output with even dimension.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Drop patch netpbm-missing-file-close.patch fixed differently by
  upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
  * Fix 'format-security' GNU compiler warning.
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
  * pamgauss: Add -maximize, -oversample .  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * pnmconvol: Extend -normalize to be applicable to convolution
    kernels specified by PGM file.  Thanks Anton Shepelev
    &lt;anton.txt@gmail.com&gt;
  * g3topbm: tolerate fill bits.
  * pbmtog3: Add -align8, -align16.
  * ppmshadow: Improve results for very small maxval.
  * ppmshadow: eliminate extraneous messages from pnmconvol.
  * libnetpbm: Improve error message for purported image that is
    exactly 1 byte long (so ends in the middle of what would be the
    magic number).
  * pbmtox10bm: Get the Perl interpreter for this Perl program from
    the PATH instead of hardcoded as /usr/bin/perl (like all other
    Netpbm Perl programs).
  * ppmcolormask: fix incorrect output when input maxval is not 255.
  * bmptopnm: fix crash when input is a Windows BMP with negative
    number for width.  Always broken.  (bmptopnm was new, as
    bmptoppm, in original Netpbm, 1992).
  * pamcomp: fix incorrect output with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pamcomp: remove debug trace message with -mixtransparency.
    Always broken.  (-mixtransparency was new in Netpbm 10.56,
    September 2011).
  * pnmtojpeg: fix array bounds violation in argument list.  Always
    broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
  * pamcrater: fix incorrect output with non-square image.
    Introduced in Netpbm 10.69 (December 2014).
  * svgtopam: fix treating negative width or height values in SVG
    like twos complement positive numbers; fail instead.  Always
    broken (svgtopam was new in Netpbm 10.33 (March 2006)).
  * svgtopam: fix error messages when input has splines or negative
    positions.  Always broken (svgtopam was new in Netpbm 10.33
    (March 2006)).
  * libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
    supply a Standard Output accepter but not a Standard Input
    feeder.  Broken since Netpbm 10.40 (September 2007).
  * Build: don't try to build standardppmdfont.c if it already
    exists (so don't require ppmdcfont to exist).  Broken around
    Netpbm 10.35 (2006).
  * Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
    While C libraries in the past have always provided this with
    just _XOPEN_SOURCE=null, it appears that M_PI is actually
    defined by Single Unix Specification 2, aka UNIX98, for which
    you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
    this.</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Version update to 10.79.3:
  * Fix license clash between GPL-2 and GPL-3
  * Few small fixes</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 10.80.1
  * pnmtopalm: Refuse to create a compressed image with more than 8
    bits per pixel.
  * pbmtext, libnetpbm font facilities: allow glyphs in font files
    that have no bitmap data; just used for their advance value to
    code a space.
  * pbmtext: Improve error message when there is a problem reading
    the font file.
  * libnetpbm font facilities: consider font invalid if a glyph is
    more than 65536 pixels high or wide.
  * ppmshadow: handle images with a black background and low
    contrast images (i.e. little difference between foreground and
    background).
  * ppmbrighten: fix bug: red pixels change hue.  Introduced in
    after Netpbm 10.11 (October 2002) and before Netpbm 10.18
    (September 2003).
  * palmtopnm: fix crash if invalid input contains color index that
    is not in the palette.  Always broken (palmtopnm was new in
    Netpbm 9.10 (October 2001)).
  * pnmtopalm: fix incorrect output with certain input files and
  - packbits_compression.  Always broken.  -packbits_compression
    was new in Netpbm 10.27 (March 2005).
  * pnmtopalm: Correct error message recommending running
    pnmquant when the real solution is to run pnmremap to modify the
    image to Palm standard colors.
  * pnmtopalm: Fix bug causing "color not in colormap" failure with
  - colormap and maxval other than 255.
  * libnetpbm: font facilities: fix invalid memory reference with
    certain font files.
  * libnetpbm: ppm_readcolordict: Improve error message when there is
    a problem reading the color dictionary.  Affects ppmhist.
  * pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
    Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
  * pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
    some always present (programs were new in Netpbm 10.52.00
    (October 2010)).
  * libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
    rgb: color specifications: yields value slightly too dim.
    Affects many programs.  Broken in Netpbm 10.79 (June 2017).</changelog>
  <changelog author="tchvatal@suse.com" date="1514548800">- Add patch makeman-py3.patch to make sure to use python3 when
  building
- Unpack the stuff only once</changelog>
  <changelog author="pgajdos@suse.com" date="1530100800">- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1558008000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
  CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
  + netpbm-CVE-2017-2579,2580.patch
  neccessary for running with ASAN
  + netpbm-asan.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559304000">- enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
  [bsc#1139636]</changelog>
</package>
<package pkgid="9cdafed5caa2f57db6713517239c236b3bfbb754ab58152d6c85721b75425598" name="nim" arch="src">
  <version epoch="0" ver="0.19.6" rel="lp151.3.3.1"/>
  <changelog author="thomazi@linux.com" date="1482494400">- Fixing spec summary</changelog>
  <changelog author="mpluskal@suse.com" date="1482494401">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
</package>
<package pkgid="b4547c87d24ae8ddacac2377cc8463730609b4d07d5bd18ceba5738a12ae3011" name="nim" arch="x86_64">
  <version epoch="0" ver="0.19.6" rel="lp151.3.3.1"/>
  <changelog author="thomazi@linux.com" date="1482494400">- Fixing spec summary</changelog>
  <changelog author="mpluskal@suse.com" date="1482494401">- Cleanup package to follow packaging guidelines</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1487505600">- Update to version 0.16.0:
  * No changelog available.
- Build and install libraries, etc.
- Install configuration files.
- Recommend git for nimble.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Update description</changelog>
  <changelog author="mpluskal@suse.com" date="1489233600">- Update list of files to fix building on Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1496491200">- Update to version 0.17.0:
  * https://nim-lang.org/blog/2017/05/17/version-0170-released.html</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.17.2:
  * Bugfix release
  * For details see:
    https://nim-lang.org/blog/2017/09/07/version-0172-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1519992000">- Update to version 0.18.0:
  * Please see:
    https://nim-lang.org/blog/2018/03/01/version-0180-released.html
- Add nim-rpmlintrc</changelog>
  <changelog author="mvetter@suse.com" date="1540209600">- Update to version 0.19.0:
  * Please see:
    https://nim-lang.org/blog/2018/09/26/version-0190-released.html</changelog>
  <changelog author="mvetter@suse.com" date="1546344000">- Update to version 0.19.2:
  Please see:
  https://nim-lang.org/blog/2018/12/31/version-0192-released.html</changelog>
  <changelog author="m.szczepaniak.000@gmail.com" date="1557835200">- Update to version 0.19.6:
  Please see:
  https://nim-lang.org/blog/2019/05/13/version-0196-released.html</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559304000">- Force more optflags usage
- Fix location of config files (boo#1137006)</changelog>
</package>
<package pkgid="88dc92102f3af1c8b952f9d85f4010c9414a53be23c30d5b27093e80ff195d09" name="nmap" arch="src">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1397304000">- Nmap 6.45
- NSE:
  * Add ssl-heartbleed script to detect the Heartbleed OpenSSL bug
  * Fixed an error-handling bug in socks-open-proxy that caused it
    to fail when scanning a SOCKS4-only proxy
  * Improved ntp-info script to handle underscores in returned
    data
  * Add quake1-info script for retrieving server and player
    information from Quake 1 game servers
  * Add unicode library for decoding and encoding UTF-8, UTF-16,
    CP437 and other character sets to Unicode code points. Scripts
    that previously just added or skipped nulls in UTF-16 data can
    use this to support non-ASCII characters
  * When doing a ping scan (-sn), the --open option will prevent down
    hosts from being shown when -v is specified. This aligns with
    similar output for othe rscan types
  * Add http-ntlm-info script for getting server information from
    Web servers that require NTLM authentication
  * Added tls library for functions related to SSLv3 and TLS
    messages. Existing ssl-enum-ciphers, ssl-date, and
    tls-nextprotoneg scripts were updated to use this library
  * Add sstp-discover script to discover Microsoft's Secure Socket
    Tunnelling Protocol
  * Added unittest library and NSE script for adding unit tests to
    NSE libraries
  * Added allseeingeye-info script
  * Add freelancer-info script
  * Add http-server-header script
  * Add rfc868-time script
  * Add weblogic-t3-info script
  * Removed a fixed value (28428) which was being set for the Request
    ID in the snmpWalk library function
  * Add http-iis-short-name-brute script
  * Add http-dlink-backdoor
  * Made telnet-brute support multiple parallel guessing threads
  * Made the table returned by ssh1.fetch_host_key contain a "key"
    element, like that of ssh2.fetch_host_key
  * Update dns-cache-snoop script to use a new list of top 50
    domains rather than a 2010 list
  * Added the qconn-exec script
- Ncat:
  * Added support for socks5 and corresponding regression tests.
  * Fixed compilation when --without-liblua is specified
  * Added NCAT_PROTO, NCAT_REMOTE_ADDR, NCAT_REMOTE_PORT,
    NCAT_LOCAL_ADDR and NCAT_LOCAL_PORT environment variables being
    set in all --*-exec child processes.
- Nsock:
  * Handle timers and timeouts via a priority queue
- Various:
  * Added TCP support to dns.lua
  * Added safe fd_set operations. This makes nmap fail gracefully
    instead of crashing when the number of file descriptors grows
    over FD_SETSIZE
  * Updated bundled liblua from 5.2.2 to 5.2.3 (bugfix release)
  * Added version detection signatures and probes for a bunch of
    Android remote mouse/keyboard servers, including AndroMouse,
    AirHID, Wifi-mouse, and RemoteMouse.
  * Fixed a bug with UDP checksum calculation
  * Idle scan now supports IPv6
  * The ICMP ID of ICMP probes is now matched against the sent ICMP
    ID to reduce the chance of false matches
- Zenmap:
  * Fixed a crash that would happen when you entered a search
    term starting with a colon</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398513600">- Nmap 6.46
- NSE:
  * Made numerous improvements to ssl-heartbleed to provide
    more reliable detection of the vulnerability
  * Fix some bugs which could cause snmp-ios-config and
    snmp-sysdescr scripts to crash
  * Improved performance of citrixlua library when handling large
    XML responses containing application lists
- Zenmap:
  * Fixed a bug which caused this crash message: "IOError:
    [Errno socket error] [Errno 10060] A connection attempt
    failed [...]" due to DOCTYPE definition to Nmap's XML output</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409054400">- Nmap 6.47:
  * updated IPv4 OS fingerprints
  * Removed the External Entity Declaration from the DOCTYPE in
    Nmap's XML. The doctype is now: &lt;!DOCTYPE nmaprun&gt;
  * Ncat: Fixed SOCKS5 username/password authentication
  * Avoid formatting NULL as "%s" when running nmap --iflist
  * Zenmap, Ndiff: Avoid crashing with old PyXML package
  * Handle ICMP admin-prohibited messages when doing service version
    detection.
  * NSE: Fix a bug causing http.head to not honor redirects.
  * Zenmap: Fix a bug in DiffViewer causing a crash
- fix self-obsoletion of zenmap (nmap-gtk)</changelog>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="a919f4e063257a4bb80f70713e56aa64a75ebaae84c36ec101003b0ae92e654d" name="nmap" arch="x86_64">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="0caeb4aa9ceac1d8a7a815d0fb59ed84c258745223a19a3c44e3f180562ccc1b" name="nping" arch="x86_64">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="5b7dfa8546fa2d542dc389699bfe55e8de579e1073d4074b6b7b7a4da1b2d2f7" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.7" rel="lp151.5.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1539691200">- Update to version v1.6 (FATE#326139, FATE#326434, FATE#326558):
  * Release 1.6
  * lightnvm: fix type coercion
  * fix reservation report 0's based dword count
  * nvme.c, list_ns: use le32_to_cpu in display
  * nvme-cli: adjust memset size for data buffer in submit_io
  * fabrics: omit newline character when reading nvme host nqn
  * fabrics: fail early if argconfig_parse failed
  * nvme-cli: print firmware activation notices support bit to id_ctrl
  * nvme-cli: add support of RAE
  * Add a single get-property command for NVMeOF.
  * nvme-ioctl.c : nvme_get_properties(): fix 64bit offset advance
  * nvme-cli: add support for DLFEAT
  * intel: fix latency stats printing
  * Update doc
  * nvme-cli: add changed-ns-list-log documentation
  * nvme-cli: add changed log ns support
  * NVMe-CLI Fix id-ns fpi field when Human Readable option selected.
  * Fix format specifier for 32-bit
  * Fix json output of 128-bit numbers
  * Replace host-gen telemetry short-option 'h' with 'g'
  * Add man pages for new device self test commands
  * Updating version to 1.1
  * nvme-cli: Implement printing get NOPSC feature
  * nvme-cli: Implement printing the get Keep Alive Timer feature
  * nvme-cli: Implement printing the get host controlled thermal management feature.
  * nvme-cli: Implement printing the get timestamp feature.
  * Adding ppc big endian support
  * Revert "nvme-cli: Wait for device file if not present after successful add_ctrl"
  * Revert "nvme-cli: Add ioctl retry support for "connect-all""
  * nvme-cli: fix compilation error
  * Updatign the plugin version
  * refactored some strings
  * Removed Duplicate commands.
  * Initial checkin for Seagate Plugin
  * nvme-cli: update the document for id-nvmset subcommand
  * nvme-cli: update new fields in id-ns subcommand
  * nvme-cli: add support for id-nvmset subcommand
  * Wrote man page for telemetry
  * nvme-cli: Implemented Device self test and log.
  * Add user parameter to specify data area region from telemetry log
  * Regenerate man pages
  * Documentation: allow to format with asciidoctor
  * Documentation: fix title markers
  * fabrics: add ctrl-loss-tmo to connect-all
  * nvme-cli: Modify Get Features-Asynchronous Event Configuration
  * Add open-channel 2.0 identify support
  * nvme-cli: fix show command typo
  * nvme-cli: Fix build breaks for GCC 8.1 Signed-off-by: Alexey Timofeyev &lt;alexey.timofeyev@sk.com&gt;
  * Add nvme id-ns command test
  * Add nvme id-ctrl command test
  * Add nvme fw-log commmand test
  * Add support for Micron plugin
  * nvme-cli: fix get_nsid() return value check
  * nvme-cli: allow block device for delete-ns
  * nvme-cli: Add ioctl retry support for "connect-all"
  * nvme-cli: Wait for device file if not present after successful add_ctrl
  * nvme-cli: show partial results if controller fails during list and list-subsys
  * fabrics: add option to supply keep-alive-timeout for connect-all
  * nvme-cli: fix perror when blkdev not given when get-ns-id
  * Fixes for log page access.
  * nvme-cli: make it return 0 in case of non-fabric for show-regs
  * Regenrate documentation
  * Documentation: add manpage entry for connect's --ctrl-loss-tmo setting
  * nvme-cli: fix leak in endurance_log command
  * nvme-cli: fix seg_fault by cmd options in endurance_log
  * Remove error print for telemetry log arg parse
  * Fix intel media wear json output
  * Use fixed-width integer types for long suffixed parameters
  * Add toshiba plugin to makefile rules.
  * Add toshiba plugin code and command documentation.
  * nvme-cli: Add friendly status messages
  * nvme-cli: correct spelling of discovery
  * get-log: Make log identifier a required parameter
  * nvme-cli: fabrics: Fix passing "host_traddr" for all transports
  * Log error incase of failure in get_nvme_subsystem_info()
  * Fix double free in list_subsys
  * Fix parameter descriptions
  * Add remaining fields from NVM Sets
  * Don't print non-existent command line options
  * Fixed a bug where cdw11 was being overwritten by cdw12
  * Regenerate documentation
  * Add manpage for endurance log
  * nvme-cli: fix typo in 'disconnect' docs
  * Fix fabrics property commands
  * Fix endianess in WDC plugin.
  * Ignore cscope files
  * Add read-recover level feature decoding
  * Add support for NVMe Sets log page
  * Add support for decoding IO Determinism features
  * Add decoding for new controller attributes
  * Update makefile dependencies
  * nvme-cli: add netapp smdevices man page
  * nvme-cli: add NetApp plugin
  * Fix freeing wrong address
  * nvme-cli: make it use NVME_IDENTIFY_DATA_SIZE
  * nvme-cli: adjust json print according to uint format
  * nvme-cli: add helper for sanitize command
  * nvme-cli: telemetry-log add controller initiated log gathering
  * flush: Use device NSID if issuing through block device
  * NVMe-CLI Fix fw_log Command json output
  * nvme-cli: fix typo in Intel SMART json output
  * nvme-cli: update documentations to sync up with subcommands
  * nvme-cli: convert iekey into a no_argument parameter
  * nvme-cli: make return negative value in nvme_get_nsid() when not blkdev
  * nvme-cli: move print-function to nvme-print
  * nvme-cli: fix leaks in subcommands
  * nvme-cli: add print for command name to effects-log
  * nvme-cli: make it have bpid in cdw10 for fw-commit
  * nvme-cli: add command specific field to json output of error-log
  * nvme-cli: Fixed incosistency of error handling in intel plugin Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * Use '-' for compounded word telemetry-log subcommand
  * Use NSID all for error log
  * nvme-cli: Implement nvme_get_log13
  * nvme-cli: handle long commands in help message by adjusting minimal padding Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * nvme-cli: wdc: Removed superfluous output in WDC plugin
  * NVMe-CLI WDC-Plugin Update drive essentials code with review comments.
  * nvme-cli: Add support of unsigned long long to json routines Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr documentation.
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr command
  * NVMe-CLI WDC-Plugin Add drive-essentials documentation
  * NVMe-CLI WDC-Plugin Add drive-essentials command
  * nvme-cli: memblaze: add error return after parse_and_open()
  * nvme-cli: memblaze: fix memory leak in memblaze-nvme.c
  * nvme-cli: Implement get_telemetry_log from 1.3 spec
  * nvme/vendor: Add get log LSP/LSO fields from 1.3 spec
  * nvme-cli: lnvm: Make it return error status when argconfig_parse fails
  * nvme-cli: fix memory leak in passthru()
  * nvme-cli: wdc: fix mismatch in document for smart-add-log
  * nvme-cli: wdc: add const to descriptions
  * nvme-cli: fix memory leak in dir_receive()
  * nvme-cli: fix memory leak in sec_recv()
  * nvme-cli: fix memory leak in dir_send()
  * nvme-cli: fix memory leak in sec_send()
  * nvme-cli: fix memory leak in set_feature()
  * nvme-cli: fix memory leak in fw_download()
  * nvme-cli: fix memory leak in ns_descs()
  * nvme-cli: fix memory leak in list_ctrl()
  * nvme-cli: add error handling for a failure of malloc
  * nvme-cli: tests: fix typo in get_feature_test
  * nvme-cli: tests: remove nsid parameter in a testcase of error-log
  * nvme-cli: update documentation of effects-log
  * nvme-cli: add support for options to effects-log subcommand
  * nvme-cli: intel: add const to descriptions of subcommand option
  * nvme-cli: intel: add check for fd after open to intel commands
  * nvme-cli: intel: fix smart-log-add documentation
  * lightnvm: enable to set OP on target creation
  * nvme-cli: intel: update smart-log-add command documentation
  * nvme-cli: update error-log documentation
  * nvme-cli: lnvm: add human-readable print format to ns-id subcommand
  * nvme-cli: lnvm: add check for fd after open operation
  * nvme-cli: lnvm: remove unnecessary force parameter of ns-id in lnvm
  * nvme-cli: lnvm: add whitespace between words in a description
  * nvme-cli: add BPS bit field to CAP controller register
  * Update subcommand alias description in README.md
  * nvme-cli: add support for json output format of sanitize-log command
  * nvme-cli: Remove unnecessary nsid field in error-log
  * nvme-cli: add print for command specific info field of error log page
  * nvme-cli: update print for sanitize-log command with output-format
  * nvme-cli: make sanitize description const
  * Fix verbose decoding for coalescing aggregation time
  * Allow hierarchy of similiarly named plugins
  Drop:
  - 0001-nvme-cli-add-NetApp-plugin.patch
  - 0002-nvme-cli-add-netapp-smdevices-man-page.patch
  - 0003-get-log-Make-log-identifier-a-required-parameter.patch
  - 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch
  - 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch
  - 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch
  - 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
  - 0008-nvme-cli-Implement-nvme_get_log13.patch
  - 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
  - 0010-nvme-cli-add-support-of-RAE.patch
  - 0011-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0012-nvme-cli-add-ana-log-documentation.patch
  - 0013-nvme-discover-sanitize-options.patch
  - 0014-Fix-double-free-in-list_subsys.patch
  - 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
  - 0016-nvme-cli-move-print-function-to-nvme-print.patch
  - 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
  - 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
  - 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Use tnvmcap register for creating namespace (FATE#326925)
  + 0001-Use-tnvmcap-register-for-creating-namespace.patch
- don't execute a command if --dry-run is supplied (FATE#326925)
  + 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
- Remove trailing "\n" so that the output is valid json (FATE#326925)
  + 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
- nvme-cli: remove unnecessary assignments (FATE#326925)
  + 0004-nvme-cli-remove-unnecessary-assignments.patch
- nvme-print.c : fix ns-descs JSON output (FATE#326925)
  + 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
- nvme-cli: fix typo in json_print_list_items (FATE#326925)
  + 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
- nvme-get-property : Add documentation (FATE#326925)
  + 0007-nvme-get-property-Add-documentation.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (FATE#326925)
  + 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on (FATE#326925)
  + 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
- nvme-models.c - search for pci.ids (FATE#326925)
  + 0010-nvme-models.c-search-for-pci.ids.patch
- nvme-cli add ns write protect feature support (FATE#326925)
  + 0011-nvme-cli-add-ns-write-protect-feature-support.patch
- nvme-cli: add minimal ana-log page support (FATE#326925)
  + 0012-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana-log documentation (FATE#326925)
  + 0013-nvme-cli-add-ana-log-documentation.patch
- Fix print format specifier for 64-bit (FATE#326925)
  + 0014-Fix-print-format-specifier-for-64-bit.patch
- nvme-ana-log: fixup compiler warning in show_ana_log() (FATE#326925)
  + 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
- nvme-vendor: fixup c99 declaration in huawei plugin (FATE#326925)
  + 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
- nvme-discover: sanitize options (FATE#326925)
  + 0017-nvme-discover-sanitize-options.patch
- Fix nvme id namespace struct (FATE#326925)
  + 0018-Fix-nvme-id-namespace-struct.patch
- nvme-cli: make show_registers_cap() static (FATE#326925)
  + 0019-nvme-cli-make-show_registers_cap-static.patch
- nvme-cli: wdc-plugin mark array static declaration (FATE#326925)
  + 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
- nvme-cli: fix sparse warnings for declaration (FATE#326925)
  + 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
- nvme-cli: don't use unsigned for fd in lnvm-nvme.c (FATE#326925)
  + 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
- nvme-cli: remove always true condition for u8 (FATE#326925)
  + 0023-nvme-cli-remove-always-true-condition-for-u8.patch
- nvme-cli: fix dead-code nvmf log page discovery (FATE#326925)
  + 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
- nvme-cli: code cleanup for passthru() handlers (FATE#326925)
  + 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
- nvme-cli: fix scaandir() return value (FATE#326925)
  + 0026-nvme-cli-fix-scaandir-return-value.patch
- nvme-cli: netapp plugin handle empty strings (FATE#326925)
  + 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
- nvme-cli: Fix the displayed metadata length value on Big (FATE#326925)
  + 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
- nvme list : fix nvme list output if identify failed on device (FATE#326925)
  + 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch~
- nvme-cli: fix indentation (FATE#326925)
  + 0031-nvme-cli-fix-indentation.patch
- nvme-cli: make wdc plug-in functions static (FATE#326925)
  + 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
- nvme-cli: mark functions static (FATE#326925)
  + 0033-nvme-cli-mark-functions-static.patch
- nvme-cli: make malloc error handling uniform (FATE#326925)
  + 0034-nvme-cli-make-malloc-error-handling-uniform.patch
- Enlarge local char[] so snprintf(3) can't truncate path. (FATE#326925)
  + 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
- fabrics: make some arguments integers (FATE#326925)
  + 0036-fabrics-make-some-arguments-integers.patch
- fabrics: don't fail empty discovery log page (FATE#326925)
  + 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
- nvme: commonize subsystems info in a helper (FATE#326925)
  + 0038-nvme-commonize-subsystems-info-in-a-helper.patch
- fabrics: add disconnect-all command (FATE#326925)
  + 0039-fabrics-add-disconnect-all-command.patch
- Regen documentation (FATE#326925)
  + 0040-Regen-documentation.patch
- attach-ns : fix segfault for ctrl list wrong input (FATE#326925)
  + 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
- nvme-discover: Retry discovery log if the generation counter (FATE#326925)
  + 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-ioctl: retrieve log pages in 4k chunks (FATE#326925)
  + 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
- nvme-discover: Re-check generation counter after log page (FATE#326925)
  + 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
- seagate-nvme: fixup coding style (FATE#326925)
  + 0045-seagate-nvme-fixup-coding-style.patch
- nvme-cli: Add 'rae' argument to nvme_get_log() (FATE#326925)
  + 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
- nvme-cli: kill nvme_passthru_admin() (FATE#326925)
  + 0047-nvme-cli-kill-nvme_passthru_admin.patch
- nvme-cli: print "\n" after nvme list-subsys -o json (FATE#326925)
  + 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
- nvme-cli: tests: fix fw_log test coding style (FATE#326925)
  + 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
- nvme-cli: tests: fix id_ctrl test coding style (FATE#326925)
  + 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
- nvme-cli: tests: fix id_ns test coding style (FATE#326925)
  + 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
- nvme-cli: tests: Add get_id_ctrl function (FATE#326925)
  + 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
- Add PCI device id checking for the WDC plugin commands. (FATE#326925)
  + 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
- Fix nvme test device selection to use controller value (FATE#326925)
  + 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
- nvme-cli: prevent resv action field overflow (FATE#326925)
  + 0056-nvme-cli-prevent-resv-action-field-overflow.patch
- nvme-cli: report subsystem-reset not supported by controller (FATE#326925)
  + 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
- nvme-cli: fix indentation for dir_[send/receive] (FATE#326925)
  + 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
- nvme-cli: make read error handling uniform (FATE#326925)
  + 0059-nvme-cli-make-read-error-handling-uniform.patch
- Use sys/ioctl.h to pull in definitions. (FATE#326925)
  + 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
- Remove unnecessary asm/byteorder.h (FATE#326925)
  + 0061-Remove-unnecessary-asm-byteorder.h.patch
- Remove unnecessary linux/types.h include. (FATE#326925)
  + 0062-Remove-unnecessary-linux-types.h-include.patch
- Include libgen.h for basename prototype. (FATE#326925)
  + 0063-Include-libgen.h-for-basename-prototype.patch
- Include sys/stat.h (FATE#326925)
  + 0064-Include-sys-stat.h.patch
- nvme-cli: remove endian.h (FATE#326925)
  + 0065-nvme-cli-remove-endian.h.patch
- We don't need to include linux/types.h here. (FATE#326925)
  + 0066-We-don-t-need-to-include-linux-types.h-here.patch
- Initialize line. (FATE#326925)
  + 0067-Initialize-line.patch
- Use standard interfaces to get timezone offsets. (FATE#326925)
  + 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
- nvme-cli: fix ioctl argument (FATE#326925)
  + 0069-nvme-cli-fix-ioctl-argument.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0070-nvme-cli-fix-a-typo.patch
- Enable code block syntax highlight in README.md (FATE#326925)
  + 0071-Enable-code-block-syntax-highlight-in-README.md.patch
- Makefile: fix bash completion install path (FATE#326925)
  + 0072-Makefile-fix-bash-completion-install-path.patch
- NVMe-CLI WDC Plugin - Simplify the device id checking (FATE#326925)
  + 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
- nvme-cli: Add wdc-plugin command vs-internal-log and update (FATE#326925)
  + 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
- nvme-cli: Add help text for wdc-plugin command (FATE#326925)
  + 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
- Update documentation (FATE#326925)
  + 0076-Update-documentation.patch
- nvme.spec.in : fix bash completion path, require (FATE#326925)
  + 0077-nvme.spec.in-fix-bash-completion-path-require.patch
- nvme-cli wdc plugin: Add get pfail dump command. (FATE#326925)
  + 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
- nvme-cli wdc plugin: Add documentation for pfail dump. (FATE#326925)
  + 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
- Re-gen documentation for new files (FATE#326925)
  + 0080-Re-gen-documentation-for-new-files.patch
- wdc: Fix strncpy warning (FATE#326925)
  + 0081-wdc-Fix-strncpy-warning.patch
- Refactor plugins in a file hierarchy (FATE#326925)
  + 0082-Refactor-plugins-in-a-file-hierarchy.patch
- nvme-cli: fix sanitize status endianness (FATE#326925)
  + 0083-nvme-cli-fix-sanitize-status-endianness.patch
- nvme-cli: fix ana-log endianness (FATE#326925)
  + 0084-nvme-cli-fix-ana-log-endianness.patch
- wdc: Use const string for suffix (FATE#326925)
  + 0085-wdc-Use-const-string-for-suffix.patch
- nvme-cli:fix a typo in SELF-TEST log (FATE#326925)
  + 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0087-nvme-cli-fix-a-typo.patch
- nvme-cli: fix array len to hold string of size 4 (FATE#326925)
  + 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
- nvme-cli: fix endianness for the structure field (FATE#326925)
  + 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
- nvme: Handle supported capabilities result for get features (FATE#326925)
  + 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
- connect-all: special treatment to EALREADY afetr write to (FATE#326925)
  + 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
- Added zsh completion installation (FATE#326925)
  + 0092-Added-zsh-completion-installation.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0093-nvme-cli-fix-a-typo.patch
- nvme: fixup ANA group descriptor offset (FATE#326925)
  + 0094-nvme-fixup-ANA-group-descriptor-offset.patch
- nvme: introduce get_nvme_ctrl_attr() (FATE#326925)
  + 0095-nvme-introduce-get_nvme_ctrl_attr.patch
- nvme: print out controller state for 'list-subsys' (FATE#326925)
  + 0096-nvme-print-out-controller-state-for-list-subsys.patch
- nvme-list-subsys: Add device name argument and print out ANA (FATE#326925)
  + 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
- list-subsys: Preserve line breaks and spaces (FATE#326925)
  + 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
- Regen documentation (FATE#326925)
  + 0099-Regen-documentation.patch
- In json output, if the commands add zero length string, it (FATE#326123)
  + 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0101-Fix-printing-of-large-ANAGRPID-values.patch
- micron-nvme: Replace direct use of ioctl (FATE#326123)
  + 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0103-Fix-printing-of-large-ANAGRPID-values.patch
- Fix typos in docs (FATE#326123)
  + 0104-Fix-typos-in-docs.patch
- Fix typos in tests and utils (FATE#326123)
  + 0105-Fix-typos-in-tests-and-utils.patch
- fabrics: support fabrics sq flow control disable (FATE#326123)
  + 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
- fabrics: use trtype_str when parsing a discovery log entry (FATE#326123)
  + 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
- nvme: Add TCP transport (FATE#326123)
  + 0108-nvme-Add-TCP-transport.patch
- fabrics: add tcp port tsas decoding (FATE#326123)
  + 0109-fabrics-add-tcp-port-tsas-decoding.patch
- fabrics: add transport header and data digest (FATE#326123)
  + 0110-fabrics-add-transport-header-and-data-digest.patch
- nvme-ioctl: clear rae for discovery log pages (FATE#326123)
  + 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
- Added support for virtualization-management command (FATE#326123)
  + 0112-Added-support-for-virtualization-management-command.patch
- nvme-cli: Don't print result on passthru error (FATE#326123)
  + 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
- nvme-cli: readme: fix typo in Alpine distro support (FATE#326123)
  + 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
- Added gentoo to README.md (FATE#326123)
  + 0115-Added-gentoo-to-README.md.patch
- fabrics: pass in number of write queues (FATE#326123)
  + 0116-fabrics-pass-in-number-of-write-queues.patch
- fabrics: pass in number of polling queues (FATE#326123)
  + 0117-fabrics-pass-in-number-of-polling-queues.patch
- Update documentation (FATE#326123)
  + 0118-Update-documentation.patch
- README: update Arch Linux install instructions (FATE#326123)
  + 0119-README-update-Arch-Linux-install-instructions.patch
- fabrics: allow nr_io/write/poll_queues and queue size to (FATE#326123)
  + 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
- nvme: Adding a block size selector to format (FATE#326123)
  + 0121-nvme-Adding-a-block-size-selector-to-format.patch
- nvme: Regenerate documentation (FATE#326123)
  + 0122-nvme-Regenerate-documentation.patch
- timeout option added to ns_create/delete (#440) (FATE#326123)
  + 0123-timeout-option-added-to-ns_create-delete-440.patch
- nvme: Remove duplicate error message (FATE#326123)
  + 0124-nvme-Remove-duplicate-error-message.patch</changelog>
  <changelog author="hare@suse.com" date="1548676800">- Update to version 1.7:
  * Use tnvmcap register for creating namespace
  * don't execute a command if --dry-run is supplied
  * Remove trailing "\n" so that the output is valid json
  * nvme-cli: remove unnecessary assignments
  * nvme-print.c : fix ns-descs JSON output
  * nvme-cli: fix typo in json_print_list_items
  * nvme-get-property : Add documentation
  * fabrics: write ctrl_loss_tmo to fabrics device on connect
  * fabrics: write keep-alive-timeout to fabrics device on connect
  * nvme-models.c - search for pci.ids
  * nvme-cli add ns write protect feature support
  * nvme-cli: add minimal ana-log page support
  * nvme-cli: add ana-log documentation
  * Fix print format specifier for 64-bit
  * nvme-ana-log: fixup compiler warning in show_ana_log()
  * nvme-vendor: fixup c99 declaration in huawei plugin
  * nvme-discover: sanitize options
  * Fix nvme id namespace struct
  * nvme-cli: make show_registers_cap() static
  * nvme-cli: wdc-plugin mark array static declaration
  * nvme-cli: fix sparse warnings for declaration
  * nvme-cli: don't use unsigned for fd in lnvm-nvme.c
  * nvme-cli: remove always true condition for u8
  * nvme-cli: fix dead-code nvmf log page discovery
  * nvme-cli: code cleanup for passthru() handlers
  * nvme-cli: fix scaandir() return value
  * nvme-cli: netapp plugin handle empty strings
  * nvme-cli: Fix the displayed metadata length value on Big Endian systems.
  * nvme list : fix nvme list output if identify failed on device
  * nvme-cli: use uniform error message for open
  * nvme-cli: fix indentation
  * nvme-cli: make wdc plug-in functions static
  * nvme-cli: mark functions static
  * nvme-cli: make malloc error handling uniform
  * Enlarge local char[] so snprintf(3) can't truncate path.
  * fabrics: make some arguments integers
  * fabrics: don't fail empty discovery log page
  * nvme: commonize subsystems info in a helper
  * fabrics: add disconnect-all command
  * Regen documentation
  * attach-ns : fix segfault for ctrl list wrong input
  * nvme-discover: Retry discovery log if the generation counter changes
  * nvme-ioctl: retrieve log pages in 4k chunks
  * nvme-discover: Re-check generation counter after log page transfer
  * seagate-nvme: fixup coding style
  * nvme-cli: Add 'rae' argument to nvme_get_log()
  * nvme-cli: kill nvme_passthru_admin()
  * nvme-cli: print "\n" after nvme list-subsys -o json
  * nvme-cli: tests: fix fw_log test coding style
  * nvme-cli: tests: fix id_ctrl test coding style
  * nvme-cli: tests: fix id_ns test coding style
  * nvme-cli: tests: Add get_id_ctrl function
  * Update gitignore for generated test files
  * Add PCI device id checking for the WDC plugin commands.
  * Fix nvme test device selection to use controller value defined in the config.json file. Before this fix, the value was hard coded to nvme0.
  * nvme-cli: prevent resv action field overflow
  * nvme-cli: report subsystem-reset not supported by controller
  * nvme-cli: fix indentation for dir_[send/receive]
  * nvme-cli: make read error handling uniform
  * Use sys/ioctl.h to pull in definitions.
  * Remove unnecessary asm/byteorder.h
  * Remove unnecessary linux/types.h include.
  * Include libgen.h for basename prototype.
  * Include sys/stat.h
  * nvme-cli: remove endian.h
  * We don't need to include linux/types.h here.
  * Initialize line.
  * Use standard interfaces to get timezone offsets.
  * nvme-cli: fix ioctl argument
  * nvme-cli: fix a typo
  * Enable code block syntax highlight in README.md
  * Makefile: fix bash completion install path
  * NVMe-CLI WDC Plugin - Simplify the device id checking routines.
  * nvme-cli: Add wdc-plugin command vs-internal-log and update wdc-plug cap-diag command with transfer-size parameter.
  * nvme-cli: Add help text for wdc-plugin command vs-internal-log. Update help text for wdc-plugin command cap-diag.
  * Update documentation
  * nvme.spec.in : fix bash completion path, require
  * nvme-cli wdc plugin: Add get pfail dump command.
  * nvme-cli wdc plugin: Add documentation for pfail dump.
  * Re-gen documentation for new files
  * wdc: Fix strncpy warning
  * Refactor plugins in a file hierarchy
  * nvme-cli: fix sanitize status endianness
  * nvme-cli: fix ana-log endianness
  * wdc: Use const string for suffix
  * nvme-cli:fix a typo in SELF-TEST log
  * nvme-cli: fix a typo
  * nvme-cli: fix array len to hold string of size 4
  * nvme-cli: fix endianness for the structure field
  * nvme: Handle supported capabilities result for get features
  * connect-all: special treatment to EALREADY afetr write to /dev/nvme-fabrics
  * Added zsh completion installation
  * nvme-cli: fix a typo
  * nvme: fixup ANA group descriptor offset
  * nvme: introduce get_nvme_ctrl_attr()
  * nvme: print out controller state for 'list-subsys'
  * nvme-list-subsys: Add device name argument and print out ANA state
  * list-subsys: Preserve line breaks and spaces
  * Regen documentation
  * In json output, if the commands add zero length string, it occur allocation fail &amp; abort (cannot display empty value)
  * Fix printing of large ANAGRPID values
  * micron-nvme: Replace direct use of ioctl
  * Fix printing of large ANAGRPID values
  * Fix typos in docs
  * Fix typos in tests and utils
  * fabrics: support fabrics sq flow control disable
  * fabrics: use trtype_str when parsing a discovery log entry
  * nvme: Add TCP transport
  * fabrics: add tcp port tsas decoding
  * fabrics: add transport header and data digest
  * nvme-ioctl: clear rae for discovery log pages
  * Added support for virtualization-management command
  * nvme-cli: Don't print result on passthru error
  * nvme-cli: readme: fix typo in Alpine distro support
  * Added gentoo to README.md
  * fabrics: pass in number of write queues
  * fabrics: pass in number of polling queues
  * Update documentation
  * README: update Arch Linux install instructions
  * fabrics: allow nr_io/write/poll_queues and queue size to discovery
  * nvme: Adding a block size selector to format
  * nvme: Regenerate documentation
  * timeout option added to ns_create/delete (#440)
  * nvme: Remove duplicate error message
  * rpm spec file: add zsh completion (#447)
  * nvme: Release 1.7
- Drop obsolete patches:
  - 0001-Use-tnvmcap-register-for-creating-namespace.patch
  - 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
  - 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
  - 0004-nvme-cli-remove-unnecessary-assignments.patch
  - 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
  - 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
  - 0007-nvme-get-property-Add-documentation.patch
  - 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
  - 0010-nvme-models.c-search-for-pci.ids.patch
  - 0011-nvme-cli-add-ns-write-protect-feature-support.patch
  - 0012-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0013-nvme-cli-add-ana-log-documentation.patch
  - 0014-Fix-print-format-specifier-for-64-bit.patch
  - 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
  - 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
  - 0017-nvme-discover-sanitize-options.patch
  - 0018-Fix-nvme-id-namespace-struct.patch
  - 0019-nvme-cli-make-show_registers_cap-static.patch
  - 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
  - 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
  - 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
  - 0023-nvme-cli-remove-always-true-condition-for-u8.patch
  - 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
  - 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
  - 0026-nvme-cli-fix-scaandir-return-value.patch
  - 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
  - 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
  - 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
  - 0030-nvme-cli-use-uniform-error-message-for-open.patch
  - 0031-nvme-cli-fix-indentation.patch
  - 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
  - 0033-nvme-cli-mark-functions-static.patch
  - 0034-nvme-cli-make-malloc-error-handling-uniform.patch
  - 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
  - 0036-fabrics-make-some-arguments-integers.patch
  - 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
  - 0038-nvme-commonize-subsystems-info-in-a-helper.patch
  - 0039-fabrics-add-disconnect-all-command.patch
  - 0040-Regen-documentation.patch
  - 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
  - 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
  - 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
  - 0045-seagate-nvme-fixup-coding-style.patch
  - 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
  - 0047-nvme-cli-kill-nvme_passthru_admin.patch
  - 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
  - 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
  - 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
  - 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
  - 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
  - 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
  - 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
  - 0056-nvme-cli-prevent-resv-action-field-overflow.patch
  - 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
  - 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
  - 0059-nvme-cli-make-read-error-handling-uniform.patch
  - 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
  - 0061-Remove-unnecessary-asm-byteorder.h.patch
  - 0062-Remove-unnecessary-linux-types.h-include.patch
  - 0063-Include-libgen.h-for-basename-prototype.patch
  - 0064-Include-sys-stat.h.patch
  - 0065-nvme-cli-remove-endian.h.patch
  - 0066-We-don-t-need-to-include-linux-types.h-here.patch
  - 0067-Initialize-line.patch
  - 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
  - 0069-nvme-cli-fix-ioctl-argument.patch
  - 0070-nvme-cli-fix-a-typo.patch
  - 0071-Enable-code-block-syntax-highlight-in-README.md.patch
  - 0072-Makefile-fix-bash-completion-install-path.patch
  - 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
  - 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
  - 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
  - 0076-Update-documentation.patch
  - 0077-nvme.spec.in-fix-bash-completion-path-require.patch
  - 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
  - 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
  - 0080-Re-gen-documentation-for-new-files.patch
  - 0081-wdc-Fix-strncpy-warning.patch
  - 0082-Refactor-plugins-in-a-file-hierarchy.patch
  - 0083-nvme-cli-fix-sanitize-status-endianness.patch
  - 0084-nvme-cli-fix-ana-log-endianness.patch
  - 0085-wdc-Use-const-string-for-suffix.patch
  - 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
  - 0087-nvme-cli-fix-a-typo.patch
  - 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
  - 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
  - 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
  - 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
  - 0092-Added-zsh-completion-installation.patch
  - 0093-nvme-cli-fix-a-typo.patch
  - 0094-nvme-fixup-ANA-group-descriptor-offset.patch
  - 0095-nvme-introduce-get_nvme_ctrl_attr.patch
  - 0096-nvme-print-out-controller-state-for-list-subsys.patch
  - 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
  - 0099-Regen-documentation.patch
  - 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
  - 0101-Fix-printing-of-large-ANAGRPID-values.patch
  - 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
  - 0104-Fix-typos-in-docs.patch
  - 0105-Fix-typos-in-tests-and-utils.patch
  - 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
  - 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
  - 0108-nvme-Add-TCP-transport.patch
  - 0109-fabrics-add-tcp-port-tsas-decoding.patch
  - 0110-fabrics-add-transport-header-and-data-digest.patch
  - 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
  - 0112-Added-support-for-virtualization-management-command.patch
  - 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
  - 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
  - 0115-Added-gentoo-to-README.md.patch
  - 0116-fabrics-pass-in-number-of-write-queues.patch
  - 0117-fabrics-pass-in-number-of-polling-queues.patch
  - 0118-Update-documentation.patch
  - 0119-README-update-Arch-Linux-install-instructions.patch
  - 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
  - 0121-nvme-Adding-a-block-size-selector-to-format.patch
  - 0122-nvme-Regenerate-documentation.patch
  - 0123-timeout-option-added-to-ns_create-delete-440.patch
  - 0124-nvme-Remove-duplicate-error-message.patch
- Add patches from upstream git tree (FATE#326925)
  + 0001-wdc-Change-device-capability-checking.patch
  + 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  + 0003-generate-new-documentation.patch
  + 0004-Fix-compilation-with-GCC-8.patch
  + 0005-Fix-CFLAGS-parameter.patch
  + 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
- Add FC-NVMe autoconnect scripts (bsc#1103354)
  + 0100-nvme_fc-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.de" date="1549886400">- Regenerate documentation (bsc#1124713)
  * Add 0007-Regen-docs.patch
- Minor cleanup for submit_io (bsc#1124713)
  * Add 0008-nvme-cli-minor-cleanup-for-submit_io.patch
- Regenerate documentation ((bsc#1124713)
  * Add 0009-Regen-documentation.patch
- Fix fc_trtype string (bsc#1124713)
  * Add 0010-nvme-cli-fix-fc-trtype-string.patch
- Add 71-nvme-iopolicy-netapp.rules (bsc#1124564)
  * Add 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1552478400">- Add nvmefc-connect.target to allow stopping the parameterized
  services (bsc#1127076). Also change the service type so udevd
  doesn't have to wait for the termination of the service process.
  + 0102-Add-nvmefc-connect.target.patch
  + 0103-Change-service-to-type-simple.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1554897600">- Add new 'ontapdevices' command and corresponding documentation.
  Requested in (bsc#1131930).
  + 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  + 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  + 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Revert stop-on-failure patch for connect-all, which caused
  unintended behaviour (bsc#1132124)
  + 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
</package>
<package pkgid="c7ce4519bdd06ffcdb5ee3d27c377b2891ebf43e81e286257c49a52b4519b8d0" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.7" rel="lp151.5.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1539691200">- Update to version v1.6 (FATE#326139, FATE#326434, FATE#326558):
  * Release 1.6
  * lightnvm: fix type coercion
  * fix reservation report 0's based dword count
  * nvme.c, list_ns: use le32_to_cpu in display
  * nvme-cli: adjust memset size for data buffer in submit_io
  * fabrics: omit newline character when reading nvme host nqn
  * fabrics: fail early if argconfig_parse failed
  * nvme-cli: print firmware activation notices support bit to id_ctrl
  * nvme-cli: add support of RAE
  * Add a single get-property command for NVMeOF.
  * nvme-ioctl.c : nvme_get_properties(): fix 64bit offset advance
  * nvme-cli: add support for DLFEAT
  * intel: fix latency stats printing
  * Update doc
  * nvme-cli: add changed-ns-list-log documentation
  * nvme-cli: add changed log ns support
  * NVMe-CLI Fix id-ns fpi field when Human Readable option selected.
  * Fix format specifier for 32-bit
  * Fix json output of 128-bit numbers
  * Replace host-gen telemetry short-option 'h' with 'g'
  * Add man pages for new device self test commands
  * Updating version to 1.1
  * nvme-cli: Implement printing get NOPSC feature
  * nvme-cli: Implement printing the get Keep Alive Timer feature
  * nvme-cli: Implement printing the get host controlled thermal management feature.
  * nvme-cli: Implement printing the get timestamp feature.
  * Adding ppc big endian support
  * Revert "nvme-cli: Wait for device file if not present after successful add_ctrl"
  * Revert "nvme-cli: Add ioctl retry support for "connect-all""
  * nvme-cli: fix compilation error
  * Updatign the plugin version
  * refactored some strings
  * Removed Duplicate commands.
  * Initial checkin for Seagate Plugin
  * nvme-cli: update the document for id-nvmset subcommand
  * nvme-cli: update new fields in id-ns subcommand
  * nvme-cli: add support for id-nvmset subcommand
  * Wrote man page for telemetry
  * nvme-cli: Implemented Device self test and log.
  * Add user parameter to specify data area region from telemetry log
  * Regenerate man pages
  * Documentation: allow to format with asciidoctor
  * Documentation: fix title markers
  * fabrics: add ctrl-loss-tmo to connect-all
  * nvme-cli: Modify Get Features-Asynchronous Event Configuration
  * Add open-channel 2.0 identify support
  * nvme-cli: fix show command typo
  * nvme-cli: Fix build breaks for GCC 8.1 Signed-off-by: Alexey Timofeyev &lt;alexey.timofeyev@sk.com&gt;
  * Add nvme id-ns command test
  * Add nvme id-ctrl command test
  * Add nvme fw-log commmand test
  * Add support for Micron plugin
  * nvme-cli: fix get_nsid() return value check
  * nvme-cli: allow block device for delete-ns
  * nvme-cli: Add ioctl retry support for "connect-all"
  * nvme-cli: Wait for device file if not present after successful add_ctrl
  * nvme-cli: show partial results if controller fails during list and list-subsys
  * fabrics: add option to supply keep-alive-timeout for connect-all
  * nvme-cli: fix perror when blkdev not given when get-ns-id
  * Fixes for log page access.
  * nvme-cli: make it return 0 in case of non-fabric for show-regs
  * Regenrate documentation
  * Documentation: add manpage entry for connect's --ctrl-loss-tmo setting
  * nvme-cli: fix leak in endurance_log command
  * nvme-cli: fix seg_fault by cmd options in endurance_log
  * Remove error print for telemetry log arg parse
  * Fix intel media wear json output
  * Use fixed-width integer types for long suffixed parameters
  * Add toshiba plugin to makefile rules.
  * Add toshiba plugin code and command documentation.
  * nvme-cli: Add friendly status messages
  * nvme-cli: correct spelling of discovery
  * get-log: Make log identifier a required parameter
  * nvme-cli: fabrics: Fix passing "host_traddr" for all transports
  * Log error incase of failure in get_nvme_subsystem_info()
  * Fix double free in list_subsys
  * Fix parameter descriptions
  * Add remaining fields from NVM Sets
  * Don't print non-existent command line options
  * Fixed a bug where cdw11 was being overwritten by cdw12
  * Regenerate documentation
  * Add manpage for endurance log
  * nvme-cli: fix typo in 'disconnect' docs
  * Fix fabrics property commands
  * Fix endianess in WDC plugin.
  * Ignore cscope files
  * Add read-recover level feature decoding
  * Add support for NVMe Sets log page
  * Add support for decoding IO Determinism features
  * Add decoding for new controller attributes
  * Update makefile dependencies
  * nvme-cli: add netapp smdevices man page
  * nvme-cli: add NetApp plugin
  * Fix freeing wrong address
  * nvme-cli: make it use NVME_IDENTIFY_DATA_SIZE
  * nvme-cli: adjust json print according to uint format
  * nvme-cli: add helper for sanitize command
  * nvme-cli: telemetry-log add controller initiated log gathering
  * flush: Use device NSID if issuing through block device
  * NVMe-CLI Fix fw_log Command json output
  * nvme-cli: fix typo in Intel SMART json output
  * nvme-cli: update documentations to sync up with subcommands
  * nvme-cli: convert iekey into a no_argument parameter
  * nvme-cli: make return negative value in nvme_get_nsid() when not blkdev
  * nvme-cli: move print-function to nvme-print
  * nvme-cli: fix leaks in subcommands
  * nvme-cli: add print for command name to effects-log
  * nvme-cli: make it have bpid in cdw10 for fw-commit
  * nvme-cli: add command specific field to json output of error-log
  * nvme-cli: Fixed incosistency of error handling in intel plugin Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * Use '-' for compounded word telemetry-log subcommand
  * Use NSID all for error log
  * nvme-cli: Implement nvme_get_log13
  * nvme-cli: handle long commands in help message by adjusting minimal padding Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * nvme-cli: wdc: Removed superfluous output in WDC plugin
  * NVMe-CLI WDC-Plugin Update drive essentials code with review comments.
  * nvme-cli: Add support of unsigned long long to json routines Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr documentation.
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr command
  * NVMe-CLI WDC-Plugin Add drive-essentials documentation
  * NVMe-CLI WDC-Plugin Add drive-essentials command
  * nvme-cli: memblaze: add error return after parse_and_open()
  * nvme-cli: memblaze: fix memory leak in memblaze-nvme.c
  * nvme-cli: Implement get_telemetry_log from 1.3 spec
  * nvme/vendor: Add get log LSP/LSO fields from 1.3 spec
  * nvme-cli: lnvm: Make it return error status when argconfig_parse fails
  * nvme-cli: fix memory leak in passthru()
  * nvme-cli: wdc: fix mismatch in document for smart-add-log
  * nvme-cli: wdc: add const to descriptions
  * nvme-cli: fix memory leak in dir_receive()
  * nvme-cli: fix memory leak in sec_recv()
  * nvme-cli: fix memory leak in dir_send()
  * nvme-cli: fix memory leak in sec_send()
  * nvme-cli: fix memory leak in set_feature()
  * nvme-cli: fix memory leak in fw_download()
  * nvme-cli: fix memory leak in ns_descs()
  * nvme-cli: fix memory leak in list_ctrl()
  * nvme-cli: add error handling for a failure of malloc
  * nvme-cli: tests: fix typo in get_feature_test
  * nvme-cli: tests: remove nsid parameter in a testcase of error-log
  * nvme-cli: update documentation of effects-log
  * nvme-cli: add support for options to effects-log subcommand
  * nvme-cli: intel: add const to descriptions of subcommand option
  * nvme-cli: intel: add check for fd after open to intel commands
  * nvme-cli: intel: fix smart-log-add documentation
  * lightnvm: enable to set OP on target creation
  * nvme-cli: intel: update smart-log-add command documentation
  * nvme-cli: update error-log documentation
  * nvme-cli: lnvm: add human-readable print format to ns-id subcommand
  * nvme-cli: lnvm: add check for fd after open operation
  * nvme-cli: lnvm: remove unnecessary force parameter of ns-id in lnvm
  * nvme-cli: lnvm: add whitespace between words in a description
  * nvme-cli: add BPS bit field to CAP controller register
  * Update subcommand alias description in README.md
  * nvme-cli: add support for json output format of sanitize-log command
  * nvme-cli: Remove unnecessary nsid field in error-log
  * nvme-cli: add print for command specific info field of error log page
  * nvme-cli: update print for sanitize-log command with output-format
  * nvme-cli: make sanitize description const
  * Fix verbose decoding for coalescing aggregation time
  * Allow hierarchy of similiarly named plugins
  Drop:
  - 0001-nvme-cli-add-NetApp-plugin.patch
  - 0002-nvme-cli-add-netapp-smdevices-man-page.patch
  - 0003-get-log-Make-log-identifier-a-required-parameter.patch
  - 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch
  - 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch
  - 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch
  - 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
  - 0008-nvme-cli-Implement-nvme_get_log13.patch
  - 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
  - 0010-nvme-cli-add-support-of-RAE.patch
  - 0011-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0012-nvme-cli-add-ana-log-documentation.patch
  - 0013-nvme-discover-sanitize-options.patch
  - 0014-Fix-double-free-in-list_subsys.patch
  - 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
  - 0016-nvme-cli-move-print-function-to-nvme-print.patch
  - 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
  - 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
  - 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Use tnvmcap register for creating namespace (FATE#326925)
  + 0001-Use-tnvmcap-register-for-creating-namespace.patch
- don't execute a command if --dry-run is supplied (FATE#326925)
  + 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
- Remove trailing "\n" so that the output is valid json (FATE#326925)
  + 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
- nvme-cli: remove unnecessary assignments (FATE#326925)
  + 0004-nvme-cli-remove-unnecessary-assignments.patch
- nvme-print.c : fix ns-descs JSON output (FATE#326925)
  + 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
- nvme-cli: fix typo in json_print_list_items (FATE#326925)
  + 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
- nvme-get-property : Add documentation (FATE#326925)
  + 0007-nvme-get-property-Add-documentation.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (FATE#326925)
  + 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on (FATE#326925)
  + 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
- nvme-models.c - search for pci.ids (FATE#326925)
  + 0010-nvme-models.c-search-for-pci.ids.patch
- nvme-cli add ns write protect feature support (FATE#326925)
  + 0011-nvme-cli-add-ns-write-protect-feature-support.patch
- nvme-cli: add minimal ana-log page support (FATE#326925)
  + 0012-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana-log documentation (FATE#326925)
  + 0013-nvme-cli-add-ana-log-documentation.patch
- Fix print format specifier for 64-bit (FATE#326925)
  + 0014-Fix-print-format-specifier-for-64-bit.patch
- nvme-ana-log: fixup compiler warning in show_ana_log() (FATE#326925)
  + 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
- nvme-vendor: fixup c99 declaration in huawei plugin (FATE#326925)
  + 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
- nvme-discover: sanitize options (FATE#326925)
  + 0017-nvme-discover-sanitize-options.patch
- Fix nvme id namespace struct (FATE#326925)
  + 0018-Fix-nvme-id-namespace-struct.patch
- nvme-cli: make show_registers_cap() static (FATE#326925)
  + 0019-nvme-cli-make-show_registers_cap-static.patch
- nvme-cli: wdc-plugin mark array static declaration (FATE#326925)
  + 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
- nvme-cli: fix sparse warnings for declaration (FATE#326925)
  + 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
- nvme-cli: don't use unsigned for fd in lnvm-nvme.c (FATE#326925)
  + 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
- nvme-cli: remove always true condition for u8 (FATE#326925)
  + 0023-nvme-cli-remove-always-true-condition-for-u8.patch
- nvme-cli: fix dead-code nvmf log page discovery (FATE#326925)
  + 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
- nvme-cli: code cleanup for passthru() handlers (FATE#326925)
  + 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
- nvme-cli: fix scaandir() return value (FATE#326925)
  + 0026-nvme-cli-fix-scaandir-return-value.patch
- nvme-cli: netapp plugin handle empty strings (FATE#326925)
  + 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
- nvme-cli: Fix the displayed metadata length value on Big (FATE#326925)
  + 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
- nvme list : fix nvme list output if identify failed on device (FATE#326925)
  + 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch~
- nvme-cli: fix indentation (FATE#326925)
  + 0031-nvme-cli-fix-indentation.patch
- nvme-cli: make wdc plug-in functions static (FATE#326925)
  + 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
- nvme-cli: mark functions static (FATE#326925)
  + 0033-nvme-cli-mark-functions-static.patch
- nvme-cli: make malloc error handling uniform (FATE#326925)
  + 0034-nvme-cli-make-malloc-error-handling-uniform.patch
- Enlarge local char[] so snprintf(3) can't truncate path. (FATE#326925)
  + 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
- fabrics: make some arguments integers (FATE#326925)
  + 0036-fabrics-make-some-arguments-integers.patch
- fabrics: don't fail empty discovery log page (FATE#326925)
  + 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
- nvme: commonize subsystems info in a helper (FATE#326925)
  + 0038-nvme-commonize-subsystems-info-in-a-helper.patch
- fabrics: add disconnect-all command (FATE#326925)
  + 0039-fabrics-add-disconnect-all-command.patch
- Regen documentation (FATE#326925)
  + 0040-Regen-documentation.patch
- attach-ns : fix segfault for ctrl list wrong input (FATE#326925)
  + 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
- nvme-discover: Retry discovery log if the generation counter (FATE#326925)
  + 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-ioctl: retrieve log pages in 4k chunks (FATE#326925)
  + 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
- nvme-discover: Re-check generation counter after log page (FATE#326925)
  + 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
- seagate-nvme: fixup coding style (FATE#326925)
  + 0045-seagate-nvme-fixup-coding-style.patch
- nvme-cli: Add 'rae' argument to nvme_get_log() (FATE#326925)
  + 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
- nvme-cli: kill nvme_passthru_admin() (FATE#326925)
  + 0047-nvme-cli-kill-nvme_passthru_admin.patch
- nvme-cli: print "\n" after nvme list-subsys -o json (FATE#326925)
  + 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
- nvme-cli: tests: fix fw_log test coding style (FATE#326925)
  + 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
- nvme-cli: tests: fix id_ctrl test coding style (FATE#326925)
  + 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
- nvme-cli: tests: fix id_ns test coding style (FATE#326925)
  + 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
- nvme-cli: tests: Add get_id_ctrl function (FATE#326925)
  + 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
- Add PCI device id checking for the WDC plugin commands. (FATE#326925)
  + 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
- Fix nvme test device selection to use controller value (FATE#326925)
  + 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
- nvme-cli: prevent resv action field overflow (FATE#326925)
  + 0056-nvme-cli-prevent-resv-action-field-overflow.patch
- nvme-cli: report subsystem-reset not supported by controller (FATE#326925)
  + 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
- nvme-cli: fix indentation for dir_[send/receive] (FATE#326925)
  + 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
- nvme-cli: make read error handling uniform (FATE#326925)
  + 0059-nvme-cli-make-read-error-handling-uniform.patch
- Use sys/ioctl.h to pull in definitions. (FATE#326925)
  + 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
- Remove unnecessary asm/byteorder.h (FATE#326925)
  + 0061-Remove-unnecessary-asm-byteorder.h.patch
- Remove unnecessary linux/types.h include. (FATE#326925)
  + 0062-Remove-unnecessary-linux-types.h-include.patch
- Include libgen.h for basename prototype. (FATE#326925)
  + 0063-Include-libgen.h-for-basename-prototype.patch
- Include sys/stat.h (FATE#326925)
  + 0064-Include-sys-stat.h.patch
- nvme-cli: remove endian.h (FATE#326925)
  + 0065-nvme-cli-remove-endian.h.patch
- We don't need to include linux/types.h here. (FATE#326925)
  + 0066-We-don-t-need-to-include-linux-types.h-here.patch
- Initialize line. (FATE#326925)
  + 0067-Initialize-line.patch
- Use standard interfaces to get timezone offsets. (FATE#326925)
  + 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
- nvme-cli: fix ioctl argument (FATE#326925)
  + 0069-nvme-cli-fix-ioctl-argument.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0070-nvme-cli-fix-a-typo.patch
- Enable code block syntax highlight in README.md (FATE#326925)
  + 0071-Enable-code-block-syntax-highlight-in-README.md.patch
- Makefile: fix bash completion install path (FATE#326925)
  + 0072-Makefile-fix-bash-completion-install-path.patch
- NVMe-CLI WDC Plugin - Simplify the device id checking (FATE#326925)
  + 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
- nvme-cli: Add wdc-plugin command vs-internal-log and update (FATE#326925)
  + 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
- nvme-cli: Add help text for wdc-plugin command (FATE#326925)
  + 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
- Update documentation (FATE#326925)
  + 0076-Update-documentation.patch
- nvme.spec.in : fix bash completion path, require (FATE#326925)
  + 0077-nvme.spec.in-fix-bash-completion-path-require.patch
- nvme-cli wdc plugin: Add get pfail dump command. (FATE#326925)
  + 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
- nvme-cli wdc plugin: Add documentation for pfail dump. (FATE#326925)
  + 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
- Re-gen documentation for new files (FATE#326925)
  + 0080-Re-gen-documentation-for-new-files.patch
- wdc: Fix strncpy warning (FATE#326925)
  + 0081-wdc-Fix-strncpy-warning.patch
- Refactor plugins in a file hierarchy (FATE#326925)
  + 0082-Refactor-plugins-in-a-file-hierarchy.patch
- nvme-cli: fix sanitize status endianness (FATE#326925)
  + 0083-nvme-cli-fix-sanitize-status-endianness.patch
- nvme-cli: fix ana-log endianness (FATE#326925)
  + 0084-nvme-cli-fix-ana-log-endianness.patch
- wdc: Use const string for suffix (FATE#326925)
  + 0085-wdc-Use-const-string-for-suffix.patch
- nvme-cli:fix a typo in SELF-TEST log (FATE#326925)
  + 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0087-nvme-cli-fix-a-typo.patch
- nvme-cli: fix array len to hold string of size 4 (FATE#326925)
  + 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
- nvme-cli: fix endianness for the structure field (FATE#326925)
  + 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
- nvme: Handle supported capabilities result for get features (FATE#326925)
  + 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
- connect-all: special treatment to EALREADY afetr write to (FATE#326925)
  + 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
- Added zsh completion installation (FATE#326925)
  + 0092-Added-zsh-completion-installation.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0093-nvme-cli-fix-a-typo.patch
- nvme: fixup ANA group descriptor offset (FATE#326925)
  + 0094-nvme-fixup-ANA-group-descriptor-offset.patch
- nvme: introduce get_nvme_ctrl_attr() (FATE#326925)
  + 0095-nvme-introduce-get_nvme_ctrl_attr.patch
- nvme: print out controller state for 'list-subsys' (FATE#326925)
  + 0096-nvme-print-out-controller-state-for-list-subsys.patch
- nvme-list-subsys: Add device name argument and print out ANA (FATE#326925)
  + 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
- list-subsys: Preserve line breaks and spaces (FATE#326925)
  + 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
- Regen documentation (FATE#326925)
  + 0099-Regen-documentation.patch
- In json output, if the commands add zero length string, it (FATE#326123)
  + 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0101-Fix-printing-of-large-ANAGRPID-values.patch
- micron-nvme: Replace direct use of ioctl (FATE#326123)
  + 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0103-Fix-printing-of-large-ANAGRPID-values.patch
- Fix typos in docs (FATE#326123)
  + 0104-Fix-typos-in-docs.patch
- Fix typos in tests and utils (FATE#326123)
  + 0105-Fix-typos-in-tests-and-utils.patch
- fabrics: support fabrics sq flow control disable (FATE#326123)
  + 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
- fabrics: use trtype_str when parsing a discovery log entry (FATE#326123)
  + 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
- nvme: Add TCP transport (FATE#326123)
  + 0108-nvme-Add-TCP-transport.patch
- fabrics: add tcp port tsas decoding (FATE#326123)
  + 0109-fabrics-add-tcp-port-tsas-decoding.patch
- fabrics: add transport header and data digest (FATE#326123)
  + 0110-fabrics-add-transport-header-and-data-digest.patch
- nvme-ioctl: clear rae for discovery log pages (FATE#326123)
  + 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
- Added support for virtualization-management command (FATE#326123)
  + 0112-Added-support-for-virtualization-management-command.patch
- nvme-cli: Don't print result on passthru error (FATE#326123)
  + 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
- nvme-cli: readme: fix typo in Alpine distro support (FATE#326123)
  + 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
- Added gentoo to README.md (FATE#326123)
  + 0115-Added-gentoo-to-README.md.patch
- fabrics: pass in number of write queues (FATE#326123)
  + 0116-fabrics-pass-in-number-of-write-queues.patch
- fabrics: pass in number of polling queues (FATE#326123)
  + 0117-fabrics-pass-in-number-of-polling-queues.patch
- Update documentation (FATE#326123)
  + 0118-Update-documentation.patch
- README: update Arch Linux install instructions (FATE#326123)
  + 0119-README-update-Arch-Linux-install-instructions.patch
- fabrics: allow nr_io/write/poll_queues and queue size to (FATE#326123)
  + 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
- nvme: Adding a block size selector to format (FATE#326123)
  + 0121-nvme-Adding-a-block-size-selector-to-format.patch
- nvme: Regenerate documentation (FATE#326123)
  + 0122-nvme-Regenerate-documentation.patch
- timeout option added to ns_create/delete (#440) (FATE#326123)
  + 0123-timeout-option-added-to-ns_create-delete-440.patch
- nvme: Remove duplicate error message (FATE#326123)
  + 0124-nvme-Remove-duplicate-error-message.patch</changelog>
  <changelog author="hare@suse.com" date="1548676800">- Update to version 1.7:
  * Use tnvmcap register for creating namespace
  * don't execute a command if --dry-run is supplied
  * Remove trailing "\n" so that the output is valid json
  * nvme-cli: remove unnecessary assignments
  * nvme-print.c : fix ns-descs JSON output
  * nvme-cli: fix typo in json_print_list_items
  * nvme-get-property : Add documentation
  * fabrics: write ctrl_loss_tmo to fabrics device on connect
  * fabrics: write keep-alive-timeout to fabrics device on connect
  * nvme-models.c - search for pci.ids
  * nvme-cli add ns write protect feature support
  * nvme-cli: add minimal ana-log page support
  * nvme-cli: add ana-log documentation
  * Fix print format specifier for 64-bit
  * nvme-ana-log: fixup compiler warning in show_ana_log()
  * nvme-vendor: fixup c99 declaration in huawei plugin
  * nvme-discover: sanitize options
  * Fix nvme id namespace struct
  * nvme-cli: make show_registers_cap() static
  * nvme-cli: wdc-plugin mark array static declaration
  * nvme-cli: fix sparse warnings for declaration
  * nvme-cli: don't use unsigned for fd in lnvm-nvme.c
  * nvme-cli: remove always true condition for u8
  * nvme-cli: fix dead-code nvmf log page discovery
  * nvme-cli: code cleanup for passthru() handlers
  * nvme-cli: fix scaandir() return value
  * nvme-cli: netapp plugin handle empty strings
  * nvme-cli: Fix the displayed metadata length value on Big Endian systems.
  * nvme list : fix nvme list output if identify failed on device
  * nvme-cli: use uniform error message for open
  * nvme-cli: fix indentation
  * nvme-cli: make wdc plug-in functions static
  * nvme-cli: mark functions static
  * nvme-cli: make malloc error handling uniform
  * Enlarge local char[] so snprintf(3) can't truncate path.
  * fabrics: make some arguments integers
  * fabrics: don't fail empty discovery log page
  * nvme: commonize subsystems info in a helper
  * fabrics: add disconnect-all command
  * Regen documentation
  * attach-ns : fix segfault for ctrl list wrong input
  * nvme-discover: Retry discovery log if the generation counter changes
  * nvme-ioctl: retrieve log pages in 4k chunks
  * nvme-discover: Re-check generation counter after log page transfer
  * seagate-nvme: fixup coding style
  * nvme-cli: Add 'rae' argument to nvme_get_log()
  * nvme-cli: kill nvme_passthru_admin()
  * nvme-cli: print "\n" after nvme list-subsys -o json
  * nvme-cli: tests: fix fw_log test coding style
  * nvme-cli: tests: fix id_ctrl test coding style
  * nvme-cli: tests: fix id_ns test coding style
  * nvme-cli: tests: Add get_id_ctrl function
  * Update gitignore for generated test files
  * Add PCI device id checking for the WDC plugin commands.
  * Fix nvme test device selection to use controller value defined in the config.json file. Before this fix, the value was hard coded to nvme0.
  * nvme-cli: prevent resv action field overflow
  * nvme-cli: report subsystem-reset not supported by controller
  * nvme-cli: fix indentation for dir_[send/receive]
  * nvme-cli: make read error handling uniform
  * Use sys/ioctl.h to pull in definitions.
  * Remove unnecessary asm/byteorder.h
  * Remove unnecessary linux/types.h include.
  * Include libgen.h for basename prototype.
  * Include sys/stat.h
  * nvme-cli: remove endian.h
  * We don't need to include linux/types.h here.
  * Initialize line.
  * Use standard interfaces to get timezone offsets.
  * nvme-cli: fix ioctl argument
  * nvme-cli: fix a typo
  * Enable code block syntax highlight in README.md
  * Makefile: fix bash completion install path
  * NVMe-CLI WDC Plugin - Simplify the device id checking routines.
  * nvme-cli: Add wdc-plugin command vs-internal-log and update wdc-plug cap-diag command with transfer-size parameter.
  * nvme-cli: Add help text for wdc-plugin command vs-internal-log. Update help text for wdc-plugin command cap-diag.
  * Update documentation
  * nvme.spec.in : fix bash completion path, require
  * nvme-cli wdc plugin: Add get pfail dump command.
  * nvme-cli wdc plugin: Add documentation for pfail dump.
  * Re-gen documentation for new files
  * wdc: Fix strncpy warning
  * Refactor plugins in a file hierarchy
  * nvme-cli: fix sanitize status endianness
  * nvme-cli: fix ana-log endianness
  * wdc: Use const string for suffix
  * nvme-cli:fix a typo in SELF-TEST log
  * nvme-cli: fix a typo
  * nvme-cli: fix array len to hold string of size 4
  * nvme-cli: fix endianness for the structure field
  * nvme: Handle supported capabilities result for get features
  * connect-all: special treatment to EALREADY afetr write to /dev/nvme-fabrics
  * Added zsh completion installation
  * nvme-cli: fix a typo
  * nvme: fixup ANA group descriptor offset
  * nvme: introduce get_nvme_ctrl_attr()
  * nvme: print out controller state for 'list-subsys'
  * nvme-list-subsys: Add device name argument and print out ANA state
  * list-subsys: Preserve line breaks and spaces
  * Regen documentation
  * In json output, if the commands add zero length string, it occur allocation fail &amp; abort (cannot display empty value)
  * Fix printing of large ANAGRPID values
  * micron-nvme: Replace direct use of ioctl
  * Fix printing of large ANAGRPID values
  * Fix typos in docs
  * Fix typos in tests and utils
  * fabrics: support fabrics sq flow control disable
  * fabrics: use trtype_str when parsing a discovery log entry
  * nvme: Add TCP transport
  * fabrics: add tcp port tsas decoding
  * fabrics: add transport header and data digest
  * nvme-ioctl: clear rae for discovery log pages
  * Added support for virtualization-management command
  * nvme-cli: Don't print result on passthru error
  * nvme-cli: readme: fix typo in Alpine distro support
  * Added gentoo to README.md
  * fabrics: pass in number of write queues
  * fabrics: pass in number of polling queues
  * Update documentation
  * README: update Arch Linux install instructions
  * fabrics: allow nr_io/write/poll_queues and queue size to discovery
  * nvme: Adding a block size selector to format
  * nvme: Regenerate documentation
  * timeout option added to ns_create/delete (#440)
  * nvme: Remove duplicate error message
  * rpm spec file: add zsh completion (#447)
  * nvme: Release 1.7
- Drop obsolete patches:
  - 0001-Use-tnvmcap-register-for-creating-namespace.patch
  - 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
  - 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
  - 0004-nvme-cli-remove-unnecessary-assignments.patch
  - 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
  - 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
  - 0007-nvme-get-property-Add-documentation.patch
  - 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
  - 0010-nvme-models.c-search-for-pci.ids.patch
  - 0011-nvme-cli-add-ns-write-protect-feature-support.patch
  - 0012-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0013-nvme-cli-add-ana-log-documentation.patch
  - 0014-Fix-print-format-specifier-for-64-bit.patch
  - 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
  - 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
  - 0017-nvme-discover-sanitize-options.patch
  - 0018-Fix-nvme-id-namespace-struct.patch
  - 0019-nvme-cli-make-show_registers_cap-static.patch
  - 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
  - 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
  - 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
  - 0023-nvme-cli-remove-always-true-condition-for-u8.patch
  - 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
  - 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
  - 0026-nvme-cli-fix-scaandir-return-value.patch
  - 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
  - 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
  - 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
  - 0030-nvme-cli-use-uniform-error-message-for-open.patch
  - 0031-nvme-cli-fix-indentation.patch
  - 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
  - 0033-nvme-cli-mark-functions-static.patch
  - 0034-nvme-cli-make-malloc-error-handling-uniform.patch
  - 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
  - 0036-fabrics-make-some-arguments-integers.patch
  - 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
  - 0038-nvme-commonize-subsystems-info-in-a-helper.patch
  - 0039-fabrics-add-disconnect-all-command.patch
  - 0040-Regen-documentation.patch
  - 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
  - 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
  - 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
  - 0045-seagate-nvme-fixup-coding-style.patch
  - 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
  - 0047-nvme-cli-kill-nvme_passthru_admin.patch
  - 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
  - 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
  - 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
  - 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
  - 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
  - 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
  - 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
  - 0056-nvme-cli-prevent-resv-action-field-overflow.patch
  - 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
  - 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
  - 0059-nvme-cli-make-read-error-handling-uniform.patch
  - 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
  - 0061-Remove-unnecessary-asm-byteorder.h.patch
  - 0062-Remove-unnecessary-linux-types.h-include.patch
  - 0063-Include-libgen.h-for-basename-prototype.patch
  - 0064-Include-sys-stat.h.patch
  - 0065-nvme-cli-remove-endian.h.patch
  - 0066-We-don-t-need-to-include-linux-types.h-here.patch
  - 0067-Initialize-line.patch
  - 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
  - 0069-nvme-cli-fix-ioctl-argument.patch
  - 0070-nvme-cli-fix-a-typo.patch
  - 0071-Enable-code-block-syntax-highlight-in-README.md.patch
  - 0072-Makefile-fix-bash-completion-install-path.patch
  - 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
  - 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
  - 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
  - 0076-Update-documentation.patch
  - 0077-nvme.spec.in-fix-bash-completion-path-require.patch
  - 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
  - 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
  - 0080-Re-gen-documentation-for-new-files.patch
  - 0081-wdc-Fix-strncpy-warning.patch
  - 0082-Refactor-plugins-in-a-file-hierarchy.patch
  - 0083-nvme-cli-fix-sanitize-status-endianness.patch
  - 0084-nvme-cli-fix-ana-log-endianness.patch
  - 0085-wdc-Use-const-string-for-suffix.patch
  - 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
  - 0087-nvme-cli-fix-a-typo.patch
  - 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
  - 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
  - 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
  - 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
  - 0092-Added-zsh-completion-installation.patch
  - 0093-nvme-cli-fix-a-typo.patch
  - 0094-nvme-fixup-ANA-group-descriptor-offset.patch
  - 0095-nvme-introduce-get_nvme_ctrl_attr.patch
  - 0096-nvme-print-out-controller-state-for-list-subsys.patch
  - 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
  - 0099-Regen-documentation.patch
  - 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
  - 0101-Fix-printing-of-large-ANAGRPID-values.patch
  - 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
  - 0104-Fix-typos-in-docs.patch
  - 0105-Fix-typos-in-tests-and-utils.patch
  - 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
  - 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
  - 0108-nvme-Add-TCP-transport.patch
  - 0109-fabrics-add-tcp-port-tsas-decoding.patch
  - 0110-fabrics-add-transport-header-and-data-digest.patch
  - 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
  - 0112-Added-support-for-virtualization-management-command.patch
  - 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
  - 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
  - 0115-Added-gentoo-to-README.md.patch
  - 0116-fabrics-pass-in-number-of-write-queues.patch
  - 0117-fabrics-pass-in-number-of-polling-queues.patch
  - 0118-Update-documentation.patch
  - 0119-README-update-Arch-Linux-install-instructions.patch
  - 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
  - 0121-nvme-Adding-a-block-size-selector-to-format.patch
  - 0122-nvme-Regenerate-documentation.patch
  - 0123-timeout-option-added-to-ns_create-delete-440.patch
  - 0124-nvme-Remove-duplicate-error-message.patch
- Add patches from upstream git tree (FATE#326925)
  + 0001-wdc-Change-device-capability-checking.patch
  + 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  + 0003-generate-new-documentation.patch
  + 0004-Fix-compilation-with-GCC-8.patch
  + 0005-Fix-CFLAGS-parameter.patch
  + 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
- Add FC-NVMe autoconnect scripts (bsc#1103354)
  + 0100-nvme_fc-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.de" date="1549886400">- Regenerate documentation (bsc#1124713)
  * Add 0007-Regen-docs.patch
- Minor cleanup for submit_io (bsc#1124713)
  * Add 0008-nvme-cli-minor-cleanup-for-submit_io.patch
- Regenerate documentation ((bsc#1124713)
  * Add 0009-Regen-documentation.patch
- Fix fc_trtype string (bsc#1124713)
  * Add 0010-nvme-cli-fix-fc-trtype-string.patch
- Add 71-nvme-iopolicy-netapp.rules (bsc#1124564)
  * Add 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1552478400">- Add nvmefc-connect.target to allow stopping the parameterized
  services (bsc#1127076). Also change the service type so udevd
  doesn't have to wait for the termination of the service process.
  + 0102-Add-nvmefc-connect.target.patch
  + 0103-Change-service-to-type-simple.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1554897600">- Add new 'ontapdevices' command and corresponding documentation.
  Requested in (bsc#1131930).
  + 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  + 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  + 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Revert stop-on-failure patch for connect-all, which caused
  unintended behaviour (bsc#1132124)
  + 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
</package>
<package pkgid="9f02aaf7eb22c7e62790e34c44ee0e247d478df870046f3e2943dd510e15b02f" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.7" rel="lp151.5.6.1"/>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1539691200">- Update to version v1.6 (FATE#326139, FATE#326434, FATE#326558):
  * Release 1.6
  * lightnvm: fix type coercion
  * fix reservation report 0's based dword count
  * nvme.c, list_ns: use le32_to_cpu in display
  * nvme-cli: adjust memset size for data buffer in submit_io
  * fabrics: omit newline character when reading nvme host nqn
  * fabrics: fail early if argconfig_parse failed
  * nvme-cli: print firmware activation notices support bit to id_ctrl
  * nvme-cli: add support of RAE
  * Add a single get-property command for NVMeOF.
  * nvme-ioctl.c : nvme_get_properties(): fix 64bit offset advance
  * nvme-cli: add support for DLFEAT
  * intel: fix latency stats printing
  * Update doc
  * nvme-cli: add changed-ns-list-log documentation
  * nvme-cli: add changed log ns support
  * NVMe-CLI Fix id-ns fpi field when Human Readable option selected.
  * Fix format specifier for 32-bit
  * Fix json output of 128-bit numbers
  * Replace host-gen telemetry short-option 'h' with 'g'
  * Add man pages for new device self test commands
  * Updating version to 1.1
  * nvme-cli: Implement printing get NOPSC feature
  * nvme-cli: Implement printing the get Keep Alive Timer feature
  * nvme-cli: Implement printing the get host controlled thermal management feature.
  * nvme-cli: Implement printing the get timestamp feature.
  * Adding ppc big endian support
  * Revert "nvme-cli: Wait for device file if not present after successful add_ctrl"
  * Revert "nvme-cli: Add ioctl retry support for "connect-all""
  * nvme-cli: fix compilation error
  * Updatign the plugin version
  * refactored some strings
  * Removed Duplicate commands.
  * Initial checkin for Seagate Plugin
  * nvme-cli: update the document for id-nvmset subcommand
  * nvme-cli: update new fields in id-ns subcommand
  * nvme-cli: add support for id-nvmset subcommand
  * Wrote man page for telemetry
  * nvme-cli: Implemented Device self test and log.
  * Add user parameter to specify data area region from telemetry log
  * Regenerate man pages
  * Documentation: allow to format with asciidoctor
  * Documentation: fix title markers
  * fabrics: add ctrl-loss-tmo to connect-all
  * nvme-cli: Modify Get Features-Asynchronous Event Configuration
  * Add open-channel 2.0 identify support
  * nvme-cli: fix show command typo
  * nvme-cli: Fix build breaks for GCC 8.1 Signed-off-by: Alexey Timofeyev &lt;alexey.timofeyev@sk.com&gt;
  * Add nvme id-ns command test
  * Add nvme id-ctrl command test
  * Add nvme fw-log commmand test
  * Add support for Micron plugin
  * nvme-cli: fix get_nsid() return value check
  * nvme-cli: allow block device for delete-ns
  * nvme-cli: Add ioctl retry support for "connect-all"
  * nvme-cli: Wait for device file if not present after successful add_ctrl
  * nvme-cli: show partial results if controller fails during list and list-subsys
  * fabrics: add option to supply keep-alive-timeout for connect-all
  * nvme-cli: fix perror when blkdev not given when get-ns-id
  * Fixes for log page access.
  * nvme-cli: make it return 0 in case of non-fabric for show-regs
  * Regenrate documentation
  * Documentation: add manpage entry for connect's --ctrl-loss-tmo setting
  * nvme-cli: fix leak in endurance_log command
  * nvme-cli: fix seg_fault by cmd options in endurance_log
  * Remove error print for telemetry log arg parse
  * Fix intel media wear json output
  * Use fixed-width integer types for long suffixed parameters
  * Add toshiba plugin to makefile rules.
  * Add toshiba plugin code and command documentation.
  * nvme-cli: Add friendly status messages
  * nvme-cli: correct spelling of discovery
  * get-log: Make log identifier a required parameter
  * nvme-cli: fabrics: Fix passing "host_traddr" for all transports
  * Log error incase of failure in get_nvme_subsystem_info()
  * Fix double free in list_subsys
  * Fix parameter descriptions
  * Add remaining fields from NVM Sets
  * Don't print non-existent command line options
  * Fixed a bug where cdw11 was being overwritten by cdw12
  * Regenerate documentation
  * Add manpage for endurance log
  * nvme-cli: fix typo in 'disconnect' docs
  * Fix fabrics property commands
  * Fix endianess in WDC plugin.
  * Ignore cscope files
  * Add read-recover level feature decoding
  * Add support for NVMe Sets log page
  * Add support for decoding IO Determinism features
  * Add decoding for new controller attributes
  * Update makefile dependencies
  * nvme-cli: add netapp smdevices man page
  * nvme-cli: add NetApp plugin
  * Fix freeing wrong address
  * nvme-cli: make it use NVME_IDENTIFY_DATA_SIZE
  * nvme-cli: adjust json print according to uint format
  * nvme-cli: add helper for sanitize command
  * nvme-cli: telemetry-log add controller initiated log gathering
  * flush: Use device NSID if issuing through block device
  * NVMe-CLI Fix fw_log Command json output
  * nvme-cli: fix typo in Intel SMART json output
  * nvme-cli: update documentations to sync up with subcommands
  * nvme-cli: convert iekey into a no_argument parameter
  * nvme-cli: make return negative value in nvme_get_nsid() when not blkdev
  * nvme-cli: move print-function to nvme-print
  * nvme-cli: fix leaks in subcommands
  * nvme-cli: add print for command name to effects-log
  * nvme-cli: make it have bpid in cdw10 for fw-commit
  * nvme-cli: add command specific field to json output of error-log
  * nvme-cli: Fixed incosistency of error handling in intel plugin Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * Use '-' for compounded word telemetry-log subcommand
  * Use NSID all for error log
  * nvme-cli: Implement nvme_get_log13
  * nvme-cli: handle long commands in help message by adjusting minimal padding Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * nvme-cli: wdc: Removed superfluous output in WDC plugin
  * NVMe-CLI WDC-Plugin Update drive essentials code with review comments.
  * nvme-cli: Add support of unsigned long long to json routines Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr documentation.
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr command
  * NVMe-CLI WDC-Plugin Add drive-essentials documentation
  * NVMe-CLI WDC-Plugin Add drive-essentials command
  * nvme-cli: memblaze: add error return after parse_and_open()
  * nvme-cli: memblaze: fix memory leak in memblaze-nvme.c
  * nvme-cli: Implement get_telemetry_log from 1.3 spec
  * nvme/vendor: Add get log LSP/LSO fields from 1.3 spec
  * nvme-cli: lnvm: Make it return error status when argconfig_parse fails
  * nvme-cli: fix memory leak in passthru()
  * nvme-cli: wdc: fix mismatch in document for smart-add-log
  * nvme-cli: wdc: add const to descriptions
  * nvme-cli: fix memory leak in dir_receive()
  * nvme-cli: fix memory leak in sec_recv()
  * nvme-cli: fix memory leak in dir_send()
  * nvme-cli: fix memory leak in sec_send()
  * nvme-cli: fix memory leak in set_feature()
  * nvme-cli: fix memory leak in fw_download()
  * nvme-cli: fix memory leak in ns_descs()
  * nvme-cli: fix memory leak in list_ctrl()
  * nvme-cli: add error handling for a failure of malloc
  * nvme-cli: tests: fix typo in get_feature_test
  * nvme-cli: tests: remove nsid parameter in a testcase of error-log
  * nvme-cli: update documentation of effects-log
  * nvme-cli: add support for options to effects-log subcommand
  * nvme-cli: intel: add const to descriptions of subcommand option
  * nvme-cli: intel: add check for fd after open to intel commands
  * nvme-cli: intel: fix smart-log-add documentation
  * lightnvm: enable to set OP on target creation
  * nvme-cli: intel: update smart-log-add command documentation
  * nvme-cli: update error-log documentation
  * nvme-cli: lnvm: add human-readable print format to ns-id subcommand
  * nvme-cli: lnvm: add check for fd after open operation
  * nvme-cli: lnvm: remove unnecessary force parameter of ns-id in lnvm
  * nvme-cli: lnvm: add whitespace between words in a description
  * nvme-cli: add BPS bit field to CAP controller register
  * Update subcommand alias description in README.md
  * nvme-cli: add support for json output format of sanitize-log command
  * nvme-cli: Remove unnecessary nsid field in error-log
  * nvme-cli: add print for command specific info field of error log page
  * nvme-cli: update print for sanitize-log command with output-format
  * nvme-cli: make sanitize description const
  * Fix verbose decoding for coalescing aggregation time
  * Allow hierarchy of similiarly named plugins
  Drop:
  - 0001-nvme-cli-add-NetApp-plugin.patch
  - 0002-nvme-cli-add-netapp-smdevices-man-page.patch
  - 0003-get-log-Make-log-identifier-a-required-parameter.patch
  - 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch
  - 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch
  - 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch
  - 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
  - 0008-nvme-cli-Implement-nvme_get_log13.patch
  - 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
  - 0010-nvme-cli-add-support-of-RAE.patch
  - 0011-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0012-nvme-cli-add-ana-log-documentation.patch
  - 0013-nvme-discover-sanitize-options.patch
  - 0014-Fix-double-free-in-list_subsys.patch
  - 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
  - 0016-nvme-cli-move-print-function-to-nvme-print.patch
  - 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
  - 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
  - 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Use tnvmcap register for creating namespace (FATE#326925)
  + 0001-Use-tnvmcap-register-for-creating-namespace.patch
- don't execute a command if --dry-run is supplied (FATE#326925)
  + 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
- Remove trailing "\n" so that the output is valid json (FATE#326925)
  + 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
- nvme-cli: remove unnecessary assignments (FATE#326925)
  + 0004-nvme-cli-remove-unnecessary-assignments.patch
- nvme-print.c : fix ns-descs JSON output (FATE#326925)
  + 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
- nvme-cli: fix typo in json_print_list_items (FATE#326925)
  + 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
- nvme-get-property : Add documentation (FATE#326925)
  + 0007-nvme-get-property-Add-documentation.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (FATE#326925)
  + 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on (FATE#326925)
  + 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
- nvme-models.c - search for pci.ids (FATE#326925)
  + 0010-nvme-models.c-search-for-pci.ids.patch
- nvme-cli add ns write protect feature support (FATE#326925)
  + 0011-nvme-cli-add-ns-write-protect-feature-support.patch
- nvme-cli: add minimal ana-log page support (FATE#326925)
  + 0012-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana-log documentation (FATE#326925)
  + 0013-nvme-cli-add-ana-log-documentation.patch
- Fix print format specifier for 64-bit (FATE#326925)
  + 0014-Fix-print-format-specifier-for-64-bit.patch
- nvme-ana-log: fixup compiler warning in show_ana_log() (FATE#326925)
  + 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
- nvme-vendor: fixup c99 declaration in huawei plugin (FATE#326925)
  + 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
- nvme-discover: sanitize options (FATE#326925)
  + 0017-nvme-discover-sanitize-options.patch
- Fix nvme id namespace struct (FATE#326925)
  + 0018-Fix-nvme-id-namespace-struct.patch
- nvme-cli: make show_registers_cap() static (FATE#326925)
  + 0019-nvme-cli-make-show_registers_cap-static.patch
- nvme-cli: wdc-plugin mark array static declaration (FATE#326925)
  + 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
- nvme-cli: fix sparse warnings for declaration (FATE#326925)
  + 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
- nvme-cli: don't use unsigned for fd in lnvm-nvme.c (FATE#326925)
  + 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
- nvme-cli: remove always true condition for u8 (FATE#326925)
  + 0023-nvme-cli-remove-always-true-condition-for-u8.patch
- nvme-cli: fix dead-code nvmf log page discovery (FATE#326925)
  + 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
- nvme-cli: code cleanup for passthru() handlers (FATE#326925)
  + 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
- nvme-cli: fix scaandir() return value (FATE#326925)
  + 0026-nvme-cli-fix-scaandir-return-value.patch
- nvme-cli: netapp plugin handle empty strings (FATE#326925)
  + 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
- nvme-cli: Fix the displayed metadata length value on Big (FATE#326925)
  + 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
- nvme list : fix nvme list output if identify failed on device (FATE#326925)
  + 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch~
- nvme-cli: fix indentation (FATE#326925)
  + 0031-nvme-cli-fix-indentation.patch
- nvme-cli: make wdc plug-in functions static (FATE#326925)
  + 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
- nvme-cli: mark functions static (FATE#326925)
  + 0033-nvme-cli-mark-functions-static.patch
- nvme-cli: make malloc error handling uniform (FATE#326925)
  + 0034-nvme-cli-make-malloc-error-handling-uniform.patch
- Enlarge local char[] so snprintf(3) can't truncate path. (FATE#326925)
  + 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
- fabrics: make some arguments integers (FATE#326925)
  + 0036-fabrics-make-some-arguments-integers.patch
- fabrics: don't fail empty discovery log page (FATE#326925)
  + 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
- nvme: commonize subsystems info in a helper (FATE#326925)
  + 0038-nvme-commonize-subsystems-info-in-a-helper.patch
- fabrics: add disconnect-all command (FATE#326925)
  + 0039-fabrics-add-disconnect-all-command.patch
- Regen documentation (FATE#326925)
  + 0040-Regen-documentation.patch
- attach-ns : fix segfault for ctrl list wrong input (FATE#326925)
  + 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
- nvme-discover: Retry discovery log if the generation counter (FATE#326925)
  + 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-ioctl: retrieve log pages in 4k chunks (FATE#326925)
  + 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
- nvme-discover: Re-check generation counter after log page (FATE#326925)
  + 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
- seagate-nvme: fixup coding style (FATE#326925)
  + 0045-seagate-nvme-fixup-coding-style.patch
- nvme-cli: Add 'rae' argument to nvme_get_log() (FATE#326925)
  + 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
- nvme-cli: kill nvme_passthru_admin() (FATE#326925)
  + 0047-nvme-cli-kill-nvme_passthru_admin.patch
- nvme-cli: print "\n" after nvme list-subsys -o json (FATE#326925)
  + 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
- nvme-cli: tests: fix fw_log test coding style (FATE#326925)
  + 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
- nvme-cli: tests: fix id_ctrl test coding style (FATE#326925)
  + 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
- nvme-cli: tests: fix id_ns test coding style (FATE#326925)
  + 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
- nvme-cli: tests: Add get_id_ctrl function (FATE#326925)
  + 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
- Add PCI device id checking for the WDC plugin commands. (FATE#326925)
  + 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
- Fix nvme test device selection to use controller value (FATE#326925)
  + 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
- nvme-cli: prevent resv action field overflow (FATE#326925)
  + 0056-nvme-cli-prevent-resv-action-field-overflow.patch
- nvme-cli: report subsystem-reset not supported by controller (FATE#326925)
  + 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
- nvme-cli: fix indentation for dir_[send/receive] (FATE#326925)
  + 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
- nvme-cli: make read error handling uniform (FATE#326925)
  + 0059-nvme-cli-make-read-error-handling-uniform.patch
- Use sys/ioctl.h to pull in definitions. (FATE#326925)
  + 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
- Remove unnecessary asm/byteorder.h (FATE#326925)
  + 0061-Remove-unnecessary-asm-byteorder.h.patch
- Remove unnecessary linux/types.h include. (FATE#326925)
  + 0062-Remove-unnecessary-linux-types.h-include.patch
- Include libgen.h for basename prototype. (FATE#326925)
  + 0063-Include-libgen.h-for-basename-prototype.patch
- Include sys/stat.h (FATE#326925)
  + 0064-Include-sys-stat.h.patch
- nvme-cli: remove endian.h (FATE#326925)
  + 0065-nvme-cli-remove-endian.h.patch
- We don't need to include linux/types.h here. (FATE#326925)
  + 0066-We-don-t-need-to-include-linux-types.h-here.patch
- Initialize line. (FATE#326925)
  + 0067-Initialize-line.patch
- Use standard interfaces to get timezone offsets. (FATE#326925)
  + 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
- nvme-cli: fix ioctl argument (FATE#326925)
  + 0069-nvme-cli-fix-ioctl-argument.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0070-nvme-cli-fix-a-typo.patch
- Enable code block syntax highlight in README.md (FATE#326925)
  + 0071-Enable-code-block-syntax-highlight-in-README.md.patch
- Makefile: fix bash completion install path (FATE#326925)
  + 0072-Makefile-fix-bash-completion-install-path.patch
- NVMe-CLI WDC Plugin - Simplify the device id checking (FATE#326925)
  + 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
- nvme-cli: Add wdc-plugin command vs-internal-log and update (FATE#326925)
  + 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
- nvme-cli: Add help text for wdc-plugin command (FATE#326925)
  + 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
- Update documentation (FATE#326925)
  + 0076-Update-documentation.patch
- nvme.spec.in : fix bash completion path, require (FATE#326925)
  + 0077-nvme.spec.in-fix-bash-completion-path-require.patch
- nvme-cli wdc plugin: Add get pfail dump command. (FATE#326925)
  + 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
- nvme-cli wdc plugin: Add documentation for pfail dump. (FATE#326925)
  + 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
- Re-gen documentation for new files (FATE#326925)
  + 0080-Re-gen-documentation-for-new-files.patch
- wdc: Fix strncpy warning (FATE#326925)
  + 0081-wdc-Fix-strncpy-warning.patch
- Refactor plugins in a file hierarchy (FATE#326925)
  + 0082-Refactor-plugins-in-a-file-hierarchy.patch
- nvme-cli: fix sanitize status endianness (FATE#326925)
  + 0083-nvme-cli-fix-sanitize-status-endianness.patch
- nvme-cli: fix ana-log endianness (FATE#326925)
  + 0084-nvme-cli-fix-ana-log-endianness.patch
- wdc: Use const string for suffix (FATE#326925)
  + 0085-wdc-Use-const-string-for-suffix.patch
- nvme-cli:fix a typo in SELF-TEST log (FATE#326925)
  + 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0087-nvme-cli-fix-a-typo.patch
- nvme-cli: fix array len to hold string of size 4 (FATE#326925)
  + 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
- nvme-cli: fix endianness for the structure field (FATE#326925)
  + 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
- nvme: Handle supported capabilities result for get features (FATE#326925)
  + 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
- connect-all: special treatment to EALREADY afetr write to (FATE#326925)
  + 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
- Added zsh completion installation (FATE#326925)
  + 0092-Added-zsh-completion-installation.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0093-nvme-cli-fix-a-typo.patch
- nvme: fixup ANA group descriptor offset (FATE#326925)
  + 0094-nvme-fixup-ANA-group-descriptor-offset.patch
- nvme: introduce get_nvme_ctrl_attr() (FATE#326925)
  + 0095-nvme-introduce-get_nvme_ctrl_attr.patch
- nvme: print out controller state for 'list-subsys' (FATE#326925)
  + 0096-nvme-print-out-controller-state-for-list-subsys.patch
- nvme-list-subsys: Add device name argument and print out ANA (FATE#326925)
  + 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
- list-subsys: Preserve line breaks and spaces (FATE#326925)
  + 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
- Regen documentation (FATE#326925)
  + 0099-Regen-documentation.patch
- In json output, if the commands add zero length string, it (FATE#326123)
  + 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0101-Fix-printing-of-large-ANAGRPID-values.patch
- micron-nvme: Replace direct use of ioctl (FATE#326123)
  + 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0103-Fix-printing-of-large-ANAGRPID-values.patch
- Fix typos in docs (FATE#326123)
  + 0104-Fix-typos-in-docs.patch
- Fix typos in tests and utils (FATE#326123)
  + 0105-Fix-typos-in-tests-and-utils.patch
- fabrics: support fabrics sq flow control disable (FATE#326123)
  + 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
- fabrics: use trtype_str when parsing a discovery log entry (FATE#326123)
  + 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
- nvme: Add TCP transport (FATE#326123)
  + 0108-nvme-Add-TCP-transport.patch
- fabrics: add tcp port tsas decoding (FATE#326123)
  + 0109-fabrics-add-tcp-port-tsas-decoding.patch
- fabrics: add transport header and data digest (FATE#326123)
  + 0110-fabrics-add-transport-header-and-data-digest.patch
- nvme-ioctl: clear rae for discovery log pages (FATE#326123)
  + 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
- Added support for virtualization-management command (FATE#326123)
  + 0112-Added-support-for-virtualization-management-command.patch
- nvme-cli: Don't print result on passthru error (FATE#326123)
  + 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
- nvme-cli: readme: fix typo in Alpine distro support (FATE#326123)
  + 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
- Added gentoo to README.md (FATE#326123)
  + 0115-Added-gentoo-to-README.md.patch
- fabrics: pass in number of write queues (FATE#326123)
  + 0116-fabrics-pass-in-number-of-write-queues.patch
- fabrics: pass in number of polling queues (FATE#326123)
  + 0117-fabrics-pass-in-number-of-polling-queues.patch
- Update documentation (FATE#326123)
  + 0118-Update-documentation.patch
- README: update Arch Linux install instructions (FATE#326123)
  + 0119-README-update-Arch-Linux-install-instructions.patch
- fabrics: allow nr_io/write/poll_queues and queue size to (FATE#326123)
  + 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
- nvme: Adding a block size selector to format (FATE#326123)
  + 0121-nvme-Adding-a-block-size-selector-to-format.patch
- nvme: Regenerate documentation (FATE#326123)
  + 0122-nvme-Regenerate-documentation.patch
- timeout option added to ns_create/delete (#440) (FATE#326123)
  + 0123-timeout-option-added-to-ns_create-delete-440.patch
- nvme: Remove duplicate error message (FATE#326123)
  + 0124-nvme-Remove-duplicate-error-message.patch</changelog>
  <changelog author="hare@suse.com" date="1548676800">- Update to version 1.7:
  * Use tnvmcap register for creating namespace
  * don't execute a command if --dry-run is supplied
  * Remove trailing "\n" so that the output is valid json
  * nvme-cli: remove unnecessary assignments
  * nvme-print.c : fix ns-descs JSON output
  * nvme-cli: fix typo in json_print_list_items
  * nvme-get-property : Add documentation
  * fabrics: write ctrl_loss_tmo to fabrics device on connect
  * fabrics: write keep-alive-timeout to fabrics device on connect
  * nvme-models.c - search for pci.ids
  * nvme-cli add ns write protect feature support
  * nvme-cli: add minimal ana-log page support
  * nvme-cli: add ana-log documentation
  * Fix print format specifier for 64-bit
  * nvme-ana-log: fixup compiler warning in show_ana_log()
  * nvme-vendor: fixup c99 declaration in huawei plugin
  * nvme-discover: sanitize options
  * Fix nvme id namespace struct
  * nvme-cli: make show_registers_cap() static
  * nvme-cli: wdc-plugin mark array static declaration
  * nvme-cli: fix sparse warnings for declaration
  * nvme-cli: don't use unsigned for fd in lnvm-nvme.c
  * nvme-cli: remove always true condition for u8
  * nvme-cli: fix dead-code nvmf log page discovery
  * nvme-cli: code cleanup for passthru() handlers
  * nvme-cli: fix scaandir() return value
  * nvme-cli: netapp plugin handle empty strings
  * nvme-cli: Fix the displayed metadata length value on Big Endian systems.
  * nvme list : fix nvme list output if identify failed on device
  * nvme-cli: use uniform error message for open
  * nvme-cli: fix indentation
  * nvme-cli: make wdc plug-in functions static
  * nvme-cli: mark functions static
  * nvme-cli: make malloc error handling uniform
  * Enlarge local char[] so snprintf(3) can't truncate path.
  * fabrics: make some arguments integers
  * fabrics: don't fail empty discovery log page
  * nvme: commonize subsystems info in a helper
  * fabrics: add disconnect-all command
  * Regen documentation
  * attach-ns : fix segfault for ctrl list wrong input
  * nvme-discover: Retry discovery log if the generation counter changes
  * nvme-ioctl: retrieve log pages in 4k chunks
  * nvme-discover: Re-check generation counter after log page transfer
  * seagate-nvme: fixup coding style
  * nvme-cli: Add 'rae' argument to nvme_get_log()
  * nvme-cli: kill nvme_passthru_admin()
  * nvme-cli: print "\n" after nvme list-subsys -o json
  * nvme-cli: tests: fix fw_log test coding style
  * nvme-cli: tests: fix id_ctrl test coding style
  * nvme-cli: tests: fix id_ns test coding style
  * nvme-cli: tests: Add get_id_ctrl function
  * Update gitignore for generated test files
  * Add PCI device id checking for the WDC plugin commands.
  * Fix nvme test device selection to use controller value defined in the config.json file. Before this fix, the value was hard coded to nvme0.
  * nvme-cli: prevent resv action field overflow
  * nvme-cli: report subsystem-reset not supported by controller
  * nvme-cli: fix indentation for dir_[send/receive]
  * nvme-cli: make read error handling uniform
  * Use sys/ioctl.h to pull in definitions.
  * Remove unnecessary asm/byteorder.h
  * Remove unnecessary linux/types.h include.
  * Include libgen.h for basename prototype.
  * Include sys/stat.h
  * nvme-cli: remove endian.h
  * We don't need to include linux/types.h here.
  * Initialize line.
  * Use standard interfaces to get timezone offsets.
  * nvme-cli: fix ioctl argument
  * nvme-cli: fix a typo
  * Enable code block syntax highlight in README.md
  * Makefile: fix bash completion install path
  * NVMe-CLI WDC Plugin - Simplify the device id checking routines.
  * nvme-cli: Add wdc-plugin command vs-internal-log and update wdc-plug cap-diag command with transfer-size parameter.
  * nvme-cli: Add help text for wdc-plugin command vs-internal-log. Update help text for wdc-plugin command cap-diag.
  * Update documentation
  * nvme.spec.in : fix bash completion path, require
  * nvme-cli wdc plugin: Add get pfail dump command.
  * nvme-cli wdc plugin: Add documentation for pfail dump.
  * Re-gen documentation for new files
  * wdc: Fix strncpy warning
  * Refactor plugins in a file hierarchy
  * nvme-cli: fix sanitize status endianness
  * nvme-cli: fix ana-log endianness
  * wdc: Use const string for suffix
  * nvme-cli:fix a typo in SELF-TEST log
  * nvme-cli: fix a typo
  * nvme-cli: fix array len to hold string of size 4
  * nvme-cli: fix endianness for the structure field
  * nvme: Handle supported capabilities result for get features
  * connect-all: special treatment to EALREADY afetr write to /dev/nvme-fabrics
  * Added zsh completion installation
  * nvme-cli: fix a typo
  * nvme: fixup ANA group descriptor offset
  * nvme: introduce get_nvme_ctrl_attr()
  * nvme: print out controller state for 'list-subsys'
  * nvme-list-subsys: Add device name argument and print out ANA state
  * list-subsys: Preserve line breaks and spaces
  * Regen documentation
  * In json output, if the commands add zero length string, it occur allocation fail &amp; abort (cannot display empty value)
  * Fix printing of large ANAGRPID values
  * micron-nvme: Replace direct use of ioctl
  * Fix printing of large ANAGRPID values
  * Fix typos in docs
  * Fix typos in tests and utils
  * fabrics: support fabrics sq flow control disable
  * fabrics: use trtype_str when parsing a discovery log entry
  * nvme: Add TCP transport
  * fabrics: add tcp port tsas decoding
  * fabrics: add transport header and data digest
  * nvme-ioctl: clear rae for discovery log pages
  * Added support for virtualization-management command
  * nvme-cli: Don't print result on passthru error
  * nvme-cli: readme: fix typo in Alpine distro support
  * Added gentoo to README.md
  * fabrics: pass in number of write queues
  * fabrics: pass in number of polling queues
  * Update documentation
  * README: update Arch Linux install instructions
  * fabrics: allow nr_io/write/poll_queues and queue size to discovery
  * nvme: Adding a block size selector to format
  * nvme: Regenerate documentation
  * timeout option added to ns_create/delete (#440)
  * nvme: Remove duplicate error message
  * rpm spec file: add zsh completion (#447)
  * nvme: Release 1.7
- Drop obsolete patches:
  - 0001-Use-tnvmcap-register-for-creating-namespace.patch
  - 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
  - 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
  - 0004-nvme-cli-remove-unnecessary-assignments.patch
  - 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
  - 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
  - 0007-nvme-get-property-Add-documentation.patch
  - 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
  - 0010-nvme-models.c-search-for-pci.ids.patch
  - 0011-nvme-cli-add-ns-write-protect-feature-support.patch
  - 0012-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0013-nvme-cli-add-ana-log-documentation.patch
  - 0014-Fix-print-format-specifier-for-64-bit.patch
  - 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
  - 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
  - 0017-nvme-discover-sanitize-options.patch
  - 0018-Fix-nvme-id-namespace-struct.patch
  - 0019-nvme-cli-make-show_registers_cap-static.patch
  - 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
  - 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
  - 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
  - 0023-nvme-cli-remove-always-true-condition-for-u8.patch
  - 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
  - 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
  - 0026-nvme-cli-fix-scaandir-return-value.patch
  - 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
  - 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
  - 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
  - 0030-nvme-cli-use-uniform-error-message-for-open.patch
  - 0031-nvme-cli-fix-indentation.patch
  - 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
  - 0033-nvme-cli-mark-functions-static.patch
  - 0034-nvme-cli-make-malloc-error-handling-uniform.patch
  - 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
  - 0036-fabrics-make-some-arguments-integers.patch
  - 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
  - 0038-nvme-commonize-subsystems-info-in-a-helper.patch
  - 0039-fabrics-add-disconnect-all-command.patch
  - 0040-Regen-documentation.patch
  - 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
  - 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
  - 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
  - 0045-seagate-nvme-fixup-coding-style.patch
  - 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
  - 0047-nvme-cli-kill-nvme_passthru_admin.patch
  - 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
  - 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
  - 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
  - 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
  - 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
  - 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
  - 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
  - 0056-nvme-cli-prevent-resv-action-field-overflow.patch
  - 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
  - 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
  - 0059-nvme-cli-make-read-error-handling-uniform.patch
  - 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
  - 0061-Remove-unnecessary-asm-byteorder.h.patch
  - 0062-Remove-unnecessary-linux-types.h-include.patch
  - 0063-Include-libgen.h-for-basename-prototype.patch
  - 0064-Include-sys-stat.h.patch
  - 0065-nvme-cli-remove-endian.h.patch
  - 0066-We-don-t-need-to-include-linux-types.h-here.patch
  - 0067-Initialize-line.patch
  - 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
  - 0069-nvme-cli-fix-ioctl-argument.patch
  - 0070-nvme-cli-fix-a-typo.patch
  - 0071-Enable-code-block-syntax-highlight-in-README.md.patch
  - 0072-Makefile-fix-bash-completion-install-path.patch
  - 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
  - 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
  - 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
  - 0076-Update-documentation.patch
  - 0077-nvme.spec.in-fix-bash-completion-path-require.patch
  - 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
  - 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
  - 0080-Re-gen-documentation-for-new-files.patch
  - 0081-wdc-Fix-strncpy-warning.patch
  - 0082-Refactor-plugins-in-a-file-hierarchy.patch
  - 0083-nvme-cli-fix-sanitize-status-endianness.patch
  - 0084-nvme-cli-fix-ana-log-endianness.patch
  - 0085-wdc-Use-const-string-for-suffix.patch
  - 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
  - 0087-nvme-cli-fix-a-typo.patch
  - 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
  - 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
  - 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
  - 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
  - 0092-Added-zsh-completion-installation.patch
  - 0093-nvme-cli-fix-a-typo.patch
  - 0094-nvme-fixup-ANA-group-descriptor-offset.patch
  - 0095-nvme-introduce-get_nvme_ctrl_attr.patch
  - 0096-nvme-print-out-controller-state-for-list-subsys.patch
  - 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
  - 0099-Regen-documentation.patch
  - 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
  - 0101-Fix-printing-of-large-ANAGRPID-values.patch
  - 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
  - 0104-Fix-typos-in-docs.patch
  - 0105-Fix-typos-in-tests-and-utils.patch
  - 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
  - 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
  - 0108-nvme-Add-TCP-transport.patch
  - 0109-fabrics-add-tcp-port-tsas-decoding.patch
  - 0110-fabrics-add-transport-header-and-data-digest.patch
  - 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
  - 0112-Added-support-for-virtualization-management-command.patch
  - 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
  - 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
  - 0115-Added-gentoo-to-README.md.patch
  - 0116-fabrics-pass-in-number-of-write-queues.patch
  - 0117-fabrics-pass-in-number-of-polling-queues.patch
  - 0118-Update-documentation.patch
  - 0119-README-update-Arch-Linux-install-instructions.patch
  - 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
  - 0121-nvme-Adding-a-block-size-selector-to-format.patch
  - 0122-nvme-Regenerate-documentation.patch
  - 0123-timeout-option-added-to-ns_create-delete-440.patch
  - 0124-nvme-Remove-duplicate-error-message.patch
- Add patches from upstream git tree (FATE#326925)
  + 0001-wdc-Change-device-capability-checking.patch
  + 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  + 0003-generate-new-documentation.patch
  + 0004-Fix-compilation-with-GCC-8.patch
  + 0005-Fix-CFLAGS-parameter.patch
  + 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
- Add FC-NVMe autoconnect scripts (bsc#1103354)
  + 0100-nvme_fc-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.de" date="1549886400">- Regenerate documentation (bsc#1124713)
  * Add 0007-Regen-docs.patch
- Minor cleanup for submit_io (bsc#1124713)
  * Add 0008-nvme-cli-minor-cleanup-for-submit_io.patch
- Regenerate documentation ((bsc#1124713)
  * Add 0009-Regen-documentation.patch
- Fix fc_trtype string (bsc#1124713)
  * Add 0010-nvme-cli-fix-fc-trtype-string.patch
- Add 71-nvme-iopolicy-netapp.rules (bsc#1124564)
  * Add 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1552478400">- Add nvmefc-connect.target to allow stopping the parameterized
  services (bsc#1127076). Also change the service type so udevd
  doesn't have to wait for the termination of the service process.
  + 0102-Add-nvmefc-connect.target.patch
  + 0103-Change-service-to-type-simple.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1554897600">- Add new 'ontapdevices' command and corresponding documentation.
  Requested in (bsc#1131930).
  + 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  + 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  + 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Revert stop-on-failure patch for connect-all, which caused
  unintended behaviour (bsc#1132124)
  + 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1561291200">- Add script to determine host NQN based on the system UUID
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
</package>
<package pkgid="fdf692a9452170fe5c78ae981b16aa2a7bd8f2bd50b26cfa5db884211666aa39" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.7" rel="lp151.5.6.1"/>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1539691200">- Update to version v1.6 (FATE#326139, FATE#326434, FATE#326558):
  * Release 1.6
  * lightnvm: fix type coercion
  * fix reservation report 0's based dword count
  * nvme.c, list_ns: use le32_to_cpu in display
  * nvme-cli: adjust memset size for data buffer in submit_io
  * fabrics: omit newline character when reading nvme host nqn
  * fabrics: fail early if argconfig_parse failed
  * nvme-cli: print firmware activation notices support bit to id_ctrl
  * nvme-cli: add support of RAE
  * Add a single get-property command for NVMeOF.
  * nvme-ioctl.c : nvme_get_properties(): fix 64bit offset advance
  * nvme-cli: add support for DLFEAT
  * intel: fix latency stats printing
  * Update doc
  * nvme-cli: add changed-ns-list-log documentation
  * nvme-cli: add changed log ns support
  * NVMe-CLI Fix id-ns fpi field when Human Readable option selected.
  * Fix format specifier for 32-bit
  * Fix json output of 128-bit numbers
  * Replace host-gen telemetry short-option 'h' with 'g'
  * Add man pages for new device self test commands
  * Updating version to 1.1
  * nvme-cli: Implement printing get NOPSC feature
  * nvme-cli: Implement printing the get Keep Alive Timer feature
  * nvme-cli: Implement printing the get host controlled thermal management feature.
  * nvme-cli: Implement printing the get timestamp feature.
  * Adding ppc big endian support
  * Revert "nvme-cli: Wait for device file if not present after successful add_ctrl"
  * Revert "nvme-cli: Add ioctl retry support for "connect-all""
  * nvme-cli: fix compilation error
  * Updatign the plugin version
  * refactored some strings
  * Removed Duplicate commands.
  * Initial checkin for Seagate Plugin
  * nvme-cli: update the document for id-nvmset subcommand
  * nvme-cli: update new fields in id-ns subcommand
  * nvme-cli: add support for id-nvmset subcommand
  * Wrote man page for telemetry
  * nvme-cli: Implemented Device self test and log.
  * Add user parameter to specify data area region from telemetry log
  * Regenerate man pages
  * Documentation: allow to format with asciidoctor
  * Documentation: fix title markers
  * fabrics: add ctrl-loss-tmo to connect-all
  * nvme-cli: Modify Get Features-Asynchronous Event Configuration
  * Add open-channel 2.0 identify support
  * nvme-cli: fix show command typo
  * nvme-cli: Fix build breaks for GCC 8.1 Signed-off-by: Alexey Timofeyev &lt;alexey.timofeyev@sk.com&gt;
  * Add nvme id-ns command test
  * Add nvme id-ctrl command test
  * Add nvme fw-log commmand test
  * Add support for Micron plugin
  * nvme-cli: fix get_nsid() return value check
  * nvme-cli: allow block device for delete-ns
  * nvme-cli: Add ioctl retry support for "connect-all"
  * nvme-cli: Wait for device file if not present after successful add_ctrl
  * nvme-cli: show partial results if controller fails during list and list-subsys
  * fabrics: add option to supply keep-alive-timeout for connect-all
  * nvme-cli: fix perror when blkdev not given when get-ns-id
  * Fixes for log page access.
  * nvme-cli: make it return 0 in case of non-fabric for show-regs
  * Regenrate documentation
  * Documentation: add manpage entry for connect's --ctrl-loss-tmo setting
  * nvme-cli: fix leak in endurance_log command
  * nvme-cli: fix seg_fault by cmd options in endurance_log
  * Remove error print for telemetry log arg parse
  * Fix intel media wear json output
  * Use fixed-width integer types for long suffixed parameters
  * Add toshiba plugin to makefile rules.
  * Add toshiba plugin code and command documentation.
  * nvme-cli: Add friendly status messages
  * nvme-cli: correct spelling of discovery
  * get-log: Make log identifier a required parameter
  * nvme-cli: fabrics: Fix passing "host_traddr" for all transports
  * Log error incase of failure in get_nvme_subsystem_info()
  * Fix double free in list_subsys
  * Fix parameter descriptions
  * Add remaining fields from NVM Sets
  * Don't print non-existent command line options
  * Fixed a bug where cdw11 was being overwritten by cdw12
  * Regenerate documentation
  * Add manpage for endurance log
  * nvme-cli: fix typo in 'disconnect' docs
  * Fix fabrics property commands
  * Fix endianess in WDC plugin.
  * Ignore cscope files
  * Add read-recover level feature decoding
  * Add support for NVMe Sets log page
  * Add support for decoding IO Determinism features
  * Add decoding for new controller attributes
  * Update makefile dependencies
  * nvme-cli: add netapp smdevices man page
  * nvme-cli: add NetApp plugin
  * Fix freeing wrong address
  * nvme-cli: make it use NVME_IDENTIFY_DATA_SIZE
  * nvme-cli: adjust json print according to uint format
  * nvme-cli: add helper for sanitize command
  * nvme-cli: telemetry-log add controller initiated log gathering
  * flush: Use device NSID if issuing through block device
  * NVMe-CLI Fix fw_log Command json output
  * nvme-cli: fix typo in Intel SMART json output
  * nvme-cli: update documentations to sync up with subcommands
  * nvme-cli: convert iekey into a no_argument parameter
  * nvme-cli: make return negative value in nvme_get_nsid() when not blkdev
  * nvme-cli: move print-function to nvme-print
  * nvme-cli: fix leaks in subcommands
  * nvme-cli: add print for command name to effects-log
  * nvme-cli: make it have bpid in cdw10 for fw-commit
  * nvme-cli: add command specific field to json output of error-log
  * nvme-cli: Fixed incosistency of error handling in intel plugin Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * Use '-' for compounded word telemetry-log subcommand
  * Use NSID all for error log
  * nvme-cli: Implement nvme_get_log13
  * nvme-cli: handle long commands in help message by adjusting minimal padding Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * nvme-cli: wdc: Removed superfluous output in WDC plugin
  * NVMe-CLI WDC-Plugin Update drive essentials code with review comments.
  * nvme-cli: Add support of unsigned long long to json routines Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr documentation.
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr command
  * NVMe-CLI WDC-Plugin Add drive-essentials documentation
  * NVMe-CLI WDC-Plugin Add drive-essentials command
  * nvme-cli: memblaze: add error return after parse_and_open()
  * nvme-cli: memblaze: fix memory leak in memblaze-nvme.c
  * nvme-cli: Implement get_telemetry_log from 1.3 spec
  * nvme/vendor: Add get log LSP/LSO fields from 1.3 spec
  * nvme-cli: lnvm: Make it return error status when argconfig_parse fails
  * nvme-cli: fix memory leak in passthru()
  * nvme-cli: wdc: fix mismatch in document for smart-add-log
  * nvme-cli: wdc: add const to descriptions
  * nvme-cli: fix memory leak in dir_receive()
  * nvme-cli: fix memory leak in sec_recv()
  * nvme-cli: fix memory leak in dir_send()
  * nvme-cli: fix memory leak in sec_send()
  * nvme-cli: fix memory leak in set_feature()
  * nvme-cli: fix memory leak in fw_download()
  * nvme-cli: fix memory leak in ns_descs()
  * nvme-cli: fix memory leak in list_ctrl()
  * nvme-cli: add error handling for a failure of malloc
  * nvme-cli: tests: fix typo in get_feature_test
  * nvme-cli: tests: remove nsid parameter in a testcase of error-log
  * nvme-cli: update documentation of effects-log
  * nvme-cli: add support for options to effects-log subcommand
  * nvme-cli: intel: add const to descriptions of subcommand option
  * nvme-cli: intel: add check for fd after open to intel commands
  * nvme-cli: intel: fix smart-log-add documentation
  * lightnvm: enable to set OP on target creation
  * nvme-cli: intel: update smart-log-add command documentation
  * nvme-cli: update error-log documentation
  * nvme-cli: lnvm: add human-readable print format to ns-id subcommand
  * nvme-cli: lnvm: add check for fd after open operation
  * nvme-cli: lnvm: remove unnecessary force parameter of ns-id in lnvm
  * nvme-cli: lnvm: add whitespace between words in a description
  * nvme-cli: add BPS bit field to CAP controller register
  * Update subcommand alias description in README.md
  * nvme-cli: add support for json output format of sanitize-log command
  * nvme-cli: Remove unnecessary nsid field in error-log
  * nvme-cli: add print for command specific info field of error log page
  * nvme-cli: update print for sanitize-log command with output-format
  * nvme-cli: make sanitize description const
  * Fix verbose decoding for coalescing aggregation time
  * Allow hierarchy of similiarly named plugins
  Drop:
  - 0001-nvme-cli-add-NetApp-plugin.patch
  - 0002-nvme-cli-add-netapp-smdevices-man-page.patch
  - 0003-get-log-Make-log-identifier-a-required-parameter.patch
  - 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch
  - 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch
  - 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch
  - 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
  - 0008-nvme-cli-Implement-nvme_get_log13.patch
  - 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
  - 0010-nvme-cli-add-support-of-RAE.patch
  - 0011-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0012-nvme-cli-add-ana-log-documentation.patch
  - 0013-nvme-discover-sanitize-options.patch
  - 0014-Fix-double-free-in-list_subsys.patch
  - 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
  - 0016-nvme-cli-move-print-function-to-nvme-print.patch
  - 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
  - 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
  - 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Use tnvmcap register for creating namespace (FATE#326925)
  + 0001-Use-tnvmcap-register-for-creating-namespace.patch
- don't execute a command if --dry-run is supplied (FATE#326925)
  + 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
- Remove trailing "\n" so that the output is valid json (FATE#326925)
  + 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
- nvme-cli: remove unnecessary assignments (FATE#326925)
  + 0004-nvme-cli-remove-unnecessary-assignments.patch
- nvme-print.c : fix ns-descs JSON output (FATE#326925)
  + 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
- nvme-cli: fix typo in json_print_list_items (FATE#326925)
  + 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
- nvme-get-property : Add documentation (FATE#326925)
  + 0007-nvme-get-property-Add-documentation.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (FATE#326925)
  + 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on (FATE#326925)
  + 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
- nvme-models.c - search for pci.ids (FATE#326925)
  + 0010-nvme-models.c-search-for-pci.ids.patch
- nvme-cli add ns write protect feature support (FATE#326925)
  + 0011-nvme-cli-add-ns-write-protect-feature-support.patch
- nvme-cli: add minimal ana-log page support (FATE#326925)
  + 0012-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana-log documentation (FATE#326925)
  + 0013-nvme-cli-add-ana-log-documentation.patch
- Fix print format specifier for 64-bit (FATE#326925)
  + 0014-Fix-print-format-specifier-for-64-bit.patch
- nvme-ana-log: fixup compiler warning in show_ana_log() (FATE#326925)
  + 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
- nvme-vendor: fixup c99 declaration in huawei plugin (FATE#326925)
  + 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
- nvme-discover: sanitize options (FATE#326925)
  + 0017-nvme-discover-sanitize-options.patch
- Fix nvme id namespace struct (FATE#326925)
  + 0018-Fix-nvme-id-namespace-struct.patch
- nvme-cli: make show_registers_cap() static (FATE#326925)
  + 0019-nvme-cli-make-show_registers_cap-static.patch
- nvme-cli: wdc-plugin mark array static declaration (FATE#326925)
  + 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
- nvme-cli: fix sparse warnings for declaration (FATE#326925)
  + 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
- nvme-cli: don't use unsigned for fd in lnvm-nvme.c (FATE#326925)
  + 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
- nvme-cli: remove always true condition for u8 (FATE#326925)
  + 0023-nvme-cli-remove-always-true-condition-for-u8.patch
- nvme-cli: fix dead-code nvmf log page discovery (FATE#326925)
  + 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
- nvme-cli: code cleanup for passthru() handlers (FATE#326925)
  + 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
- nvme-cli: fix scaandir() return value (FATE#326925)
  + 0026-nvme-cli-fix-scaandir-return-value.patch
- nvme-cli: netapp plugin handle empty strings (FATE#326925)
  + 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
- nvme-cli: Fix the displayed metadata length value on Big (FATE#326925)
  + 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
- nvme list : fix nvme list output if identify failed on device (FATE#326925)
  + 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch~
- nvme-cli: fix indentation (FATE#326925)
  + 0031-nvme-cli-fix-indentation.patch
- nvme-cli: make wdc plug-in functions static (FATE#326925)
  + 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
- nvme-cli: mark functions static (FATE#326925)
  + 0033-nvme-cli-mark-functions-static.patch
- nvme-cli: make malloc error handling uniform (FATE#326925)
  + 0034-nvme-cli-make-malloc-error-handling-uniform.patch
- Enlarge local char[] so snprintf(3) can't truncate path. (FATE#326925)
  + 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
- fabrics: make some arguments integers (FATE#326925)
  + 0036-fabrics-make-some-arguments-integers.patch
- fabrics: don't fail empty discovery log page (FATE#326925)
  + 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
- nvme: commonize subsystems info in a helper (FATE#326925)
  + 0038-nvme-commonize-subsystems-info-in-a-helper.patch
- fabrics: add disconnect-all command (FATE#326925)
  + 0039-fabrics-add-disconnect-all-command.patch
- Regen documentation (FATE#326925)
  + 0040-Regen-documentation.patch
- attach-ns : fix segfault for ctrl list wrong input (FATE#326925)
  + 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
- nvme-discover: Retry discovery log if the generation counter (FATE#326925)
  + 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-ioctl: retrieve log pages in 4k chunks (FATE#326925)
  + 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
- nvme-discover: Re-check generation counter after log page (FATE#326925)
  + 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
- seagate-nvme: fixup coding style (FATE#326925)
  + 0045-seagate-nvme-fixup-coding-style.patch
- nvme-cli: Add 'rae' argument to nvme_get_log() (FATE#326925)
  + 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
- nvme-cli: kill nvme_passthru_admin() (FATE#326925)
  + 0047-nvme-cli-kill-nvme_passthru_admin.patch
- nvme-cli: print "\n" after nvme list-subsys -o json (FATE#326925)
  + 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
- nvme-cli: tests: fix fw_log test coding style (FATE#326925)
  + 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
- nvme-cli: tests: fix id_ctrl test coding style (FATE#326925)
  + 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
- nvme-cli: tests: fix id_ns test coding style (FATE#326925)
  + 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
- nvme-cli: tests: Add get_id_ctrl function (FATE#326925)
  + 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
- Add PCI device id checking for the WDC plugin commands. (FATE#326925)
  + 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
- Fix nvme test device selection to use controller value (FATE#326925)
  + 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
- nvme-cli: prevent resv action field overflow (FATE#326925)
  + 0056-nvme-cli-prevent-resv-action-field-overflow.patch
- nvme-cli: report subsystem-reset not supported by controller (FATE#326925)
  + 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
- nvme-cli: fix indentation for dir_[send/receive] (FATE#326925)
  + 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
- nvme-cli: make read error handling uniform (FATE#326925)
  + 0059-nvme-cli-make-read-error-handling-uniform.patch
- Use sys/ioctl.h to pull in definitions. (FATE#326925)
  + 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
- Remove unnecessary asm/byteorder.h (FATE#326925)
  + 0061-Remove-unnecessary-asm-byteorder.h.patch
- Remove unnecessary linux/types.h include. (FATE#326925)
  + 0062-Remove-unnecessary-linux-types.h-include.patch
- Include libgen.h for basename prototype. (FATE#326925)
  + 0063-Include-libgen.h-for-basename-prototype.patch
- Include sys/stat.h (FATE#326925)
  + 0064-Include-sys-stat.h.patch
- nvme-cli: remove endian.h (FATE#326925)
  + 0065-nvme-cli-remove-endian.h.patch
- We don't need to include linux/types.h here. (FATE#326925)
  + 0066-We-don-t-need-to-include-linux-types.h-here.patch
- Initialize line. (FATE#326925)
  + 0067-Initialize-line.patch
- Use standard interfaces to get timezone offsets. (FATE#326925)
  + 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
- nvme-cli: fix ioctl argument (FATE#326925)
  + 0069-nvme-cli-fix-ioctl-argument.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0070-nvme-cli-fix-a-typo.patch
- Enable code block syntax highlight in README.md (FATE#326925)
  + 0071-Enable-code-block-syntax-highlight-in-README.md.patch
- Makefile: fix bash completion install path (FATE#326925)
  + 0072-Makefile-fix-bash-completion-install-path.patch
- NVMe-CLI WDC Plugin - Simplify the device id checking (FATE#326925)
  + 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
- nvme-cli: Add wdc-plugin command vs-internal-log and update (FATE#326925)
  + 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
- nvme-cli: Add help text for wdc-plugin command (FATE#326925)
  + 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
- Update documentation (FATE#326925)
  + 0076-Update-documentation.patch
- nvme.spec.in : fix bash completion path, require (FATE#326925)
  + 0077-nvme.spec.in-fix-bash-completion-path-require.patch
- nvme-cli wdc plugin: Add get pfail dump command. (FATE#326925)
  + 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
- nvme-cli wdc plugin: Add documentation for pfail dump. (FATE#326925)
  + 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
- Re-gen documentation for new files (FATE#326925)
  + 0080-Re-gen-documentation-for-new-files.patch
- wdc: Fix strncpy warning (FATE#326925)
  + 0081-wdc-Fix-strncpy-warning.patch
- Refactor plugins in a file hierarchy (FATE#326925)
  + 0082-Refactor-plugins-in-a-file-hierarchy.patch
- nvme-cli: fix sanitize status endianness (FATE#326925)
  + 0083-nvme-cli-fix-sanitize-status-endianness.patch
- nvme-cli: fix ana-log endianness (FATE#326925)
  + 0084-nvme-cli-fix-ana-log-endianness.patch
- wdc: Use const string for suffix (FATE#326925)
  + 0085-wdc-Use-const-string-for-suffix.patch
- nvme-cli:fix a typo in SELF-TEST log (FATE#326925)
  + 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0087-nvme-cli-fix-a-typo.patch
- nvme-cli: fix array len to hold string of size 4 (FATE#326925)
  + 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
- nvme-cli: fix endianness for the structure field (FATE#326925)
  + 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
- nvme: Handle supported capabilities result for get features (FATE#326925)
  + 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
- connect-all: special treatment to EALREADY afetr write to (FATE#326925)
  + 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
- Added zsh completion installation (FATE#326925)
  + 0092-Added-zsh-completion-installation.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0093-nvme-cli-fix-a-typo.patch
- nvme: fixup ANA group descriptor offset (FATE#326925)
  + 0094-nvme-fixup-ANA-group-descriptor-offset.patch
- nvme: introduce get_nvme_ctrl_attr() (FATE#326925)
  + 0095-nvme-introduce-get_nvme_ctrl_attr.patch
- nvme: print out controller state for 'list-subsys' (FATE#326925)
  + 0096-nvme-print-out-controller-state-for-list-subsys.patch
- nvme-list-subsys: Add device name argument and print out ANA (FATE#326925)
  + 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
- list-subsys: Preserve line breaks and spaces (FATE#326925)
  + 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
- Regen documentation (FATE#326925)
  + 0099-Regen-documentation.patch
- In json output, if the commands add zero length string, it (FATE#326123)
  + 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0101-Fix-printing-of-large-ANAGRPID-values.patch
- micron-nvme: Replace direct use of ioctl (FATE#326123)
  + 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0103-Fix-printing-of-large-ANAGRPID-values.patch
- Fix typos in docs (FATE#326123)
  + 0104-Fix-typos-in-docs.patch
- Fix typos in tests and utils (FATE#326123)
  + 0105-Fix-typos-in-tests-and-utils.patch
- fabrics: support fabrics sq flow control disable (FATE#326123)
  + 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
- fabrics: use trtype_str when parsing a discovery log entry (FATE#326123)
  + 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
- nvme: Add TCP transport (FATE#326123)
  + 0108-nvme-Add-TCP-transport.patch
- fabrics: add tcp port tsas decoding (FATE#326123)
  + 0109-fabrics-add-tcp-port-tsas-decoding.patch
- fabrics: add transport header and data digest (FATE#326123)
  + 0110-fabrics-add-transport-header-and-data-digest.patch
- nvme-ioctl: clear rae for discovery log pages (FATE#326123)
  + 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
- Added support for virtualization-management command (FATE#326123)
  + 0112-Added-support-for-virtualization-management-command.patch
- nvme-cli: Don't print result on passthru error (FATE#326123)
  + 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
- nvme-cli: readme: fix typo in Alpine distro support (FATE#326123)
  + 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
- Added gentoo to README.md (FATE#326123)
  + 0115-Added-gentoo-to-README.md.patch
- fabrics: pass in number of write queues (FATE#326123)
  + 0116-fabrics-pass-in-number-of-write-queues.patch
- fabrics: pass in number of polling queues (FATE#326123)
  + 0117-fabrics-pass-in-number-of-polling-queues.patch
- Update documentation (FATE#326123)
  + 0118-Update-documentation.patch
- README: update Arch Linux install instructions (FATE#326123)
  + 0119-README-update-Arch-Linux-install-instructions.patch
- fabrics: allow nr_io/write/poll_queues and queue size to (FATE#326123)
  + 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
- nvme: Adding a block size selector to format (FATE#326123)
  + 0121-nvme-Adding-a-block-size-selector-to-format.patch
- nvme: Regenerate documentation (FATE#326123)
  + 0122-nvme-Regenerate-documentation.patch
- timeout option added to ns_create/delete (#440) (FATE#326123)
  + 0123-timeout-option-added-to-ns_create-delete-440.patch
- nvme: Remove duplicate error message (FATE#326123)
  + 0124-nvme-Remove-duplicate-error-message.patch</changelog>
  <changelog author="hare@suse.com" date="1548676800">- Update to version 1.7:
  * Use tnvmcap register for creating namespace
  * don't execute a command if --dry-run is supplied
  * Remove trailing "\n" so that the output is valid json
  * nvme-cli: remove unnecessary assignments
  * nvme-print.c : fix ns-descs JSON output
  * nvme-cli: fix typo in json_print_list_items
  * nvme-get-property : Add documentation
  * fabrics: write ctrl_loss_tmo to fabrics device on connect
  * fabrics: write keep-alive-timeout to fabrics device on connect
  * nvme-models.c - search for pci.ids
  * nvme-cli add ns write protect feature support
  * nvme-cli: add minimal ana-log page support
  * nvme-cli: add ana-log documentation
  * Fix print format specifier for 64-bit
  * nvme-ana-log: fixup compiler warning in show_ana_log()
  * nvme-vendor: fixup c99 declaration in huawei plugin
  * nvme-discover: sanitize options
  * Fix nvme id namespace struct
  * nvme-cli: make show_registers_cap() static
  * nvme-cli: wdc-plugin mark array static declaration
  * nvme-cli: fix sparse warnings for declaration
  * nvme-cli: don't use unsigned for fd in lnvm-nvme.c
  * nvme-cli: remove always true condition for u8
  * nvme-cli: fix dead-code nvmf log page discovery
  * nvme-cli: code cleanup for passthru() handlers
  * nvme-cli: fix scaandir() return value
  * nvme-cli: netapp plugin handle empty strings
  * nvme-cli: Fix the displayed metadata length value on Big Endian systems.
  * nvme list : fix nvme list output if identify failed on device
  * nvme-cli: use uniform error message for open
  * nvme-cli: fix indentation
  * nvme-cli: make wdc plug-in functions static
  * nvme-cli: mark functions static
  * nvme-cli: make malloc error handling uniform
  * Enlarge local char[] so snprintf(3) can't truncate path.
  * fabrics: make some arguments integers
  * fabrics: don't fail empty discovery log page
  * nvme: commonize subsystems info in a helper
  * fabrics: add disconnect-all command
  * Regen documentation
  * attach-ns : fix segfault for ctrl list wrong input
  * nvme-discover: Retry discovery log if the generation counter changes
  * nvme-ioctl: retrieve log pages in 4k chunks
  * nvme-discover: Re-check generation counter after log page transfer
  * seagate-nvme: fixup coding style
  * nvme-cli: Add 'rae' argument to nvme_get_log()
  * nvme-cli: kill nvme_passthru_admin()
  * nvme-cli: print "\n" after nvme list-subsys -o json
  * nvme-cli: tests: fix fw_log test coding style
  * nvme-cli: tests: fix id_ctrl test coding style
  * nvme-cli: tests: fix id_ns test coding style
  * nvme-cli: tests: Add get_id_ctrl function
  * Update gitignore for generated test files
  * Add PCI device id checking for the WDC plugin commands.
  * Fix nvme test device selection to use controller value defined in the config.json file. Before this fix, the value was hard coded to nvme0.
  * nvme-cli: prevent resv action field overflow
  * nvme-cli: report subsystem-reset not supported by controller
  * nvme-cli: fix indentation for dir_[send/receive]
  * nvme-cli: make read error handling uniform
  * Use sys/ioctl.h to pull in definitions.
  * Remove unnecessary asm/byteorder.h
  * Remove unnecessary linux/types.h include.
  * Include libgen.h for basename prototype.
  * Include sys/stat.h
  * nvme-cli: remove endian.h
  * We don't need to include linux/types.h here.
  * Initialize line.
  * Use standard interfaces to get timezone offsets.
  * nvme-cli: fix ioctl argument
  * nvme-cli: fix a typo
  * Enable code block syntax highlight in README.md
  * Makefile: fix bash completion install path
  * NVMe-CLI WDC Plugin - Simplify the device id checking routines.
  * nvme-cli: Add wdc-plugin command vs-internal-log and update wdc-plug cap-diag command with transfer-size parameter.
  * nvme-cli: Add help text for wdc-plugin command vs-internal-log. Update help text for wdc-plugin command cap-diag.
  * Update documentation
  * nvme.spec.in : fix bash completion path, require
  * nvme-cli wdc plugin: Add get pfail dump command.
  * nvme-cli wdc plugin: Add documentation for pfail dump.
  * Re-gen documentation for new files
  * wdc: Fix strncpy warning
  * Refactor plugins in a file hierarchy
  * nvme-cli: fix sanitize status endianness
  * nvme-cli: fix ana-log endianness
  * wdc: Use const string for suffix
  * nvme-cli:fix a typo in SELF-TEST log
  * nvme-cli: fix a typo
  * nvme-cli: fix array len to hold string of size 4
  * nvme-cli: fix endianness for the structure field
  * nvme: Handle supported capabilities result for get features
  * connect-all: special treatment to EALREADY afetr write to /dev/nvme-fabrics
  * Added zsh completion installation
  * nvme-cli: fix a typo
  * nvme: fixup ANA group descriptor offset
  * nvme: introduce get_nvme_ctrl_attr()
  * nvme: print out controller state for 'list-subsys'
  * nvme-list-subsys: Add device name argument and print out ANA state
  * list-subsys: Preserve line breaks and spaces
  * Regen documentation
  * In json output, if the commands add zero length string, it occur allocation fail &amp; abort (cannot display empty value)
  * Fix printing of large ANAGRPID values
  * micron-nvme: Replace direct use of ioctl
  * Fix printing of large ANAGRPID values
  * Fix typos in docs
  * Fix typos in tests and utils
  * fabrics: support fabrics sq flow control disable
  * fabrics: use trtype_str when parsing a discovery log entry
  * nvme: Add TCP transport
  * fabrics: add tcp port tsas decoding
  * fabrics: add transport header and data digest
  * nvme-ioctl: clear rae for discovery log pages
  * Added support for virtualization-management command
  * nvme-cli: Don't print result on passthru error
  * nvme-cli: readme: fix typo in Alpine distro support
  * Added gentoo to README.md
  * fabrics: pass in number of write queues
  * fabrics: pass in number of polling queues
  * Update documentation
  * README: update Arch Linux install instructions
  * fabrics: allow nr_io/write/poll_queues and queue size to discovery
  * nvme: Adding a block size selector to format
  * nvme: Regenerate documentation
  * timeout option added to ns_create/delete (#440)
  * nvme: Remove duplicate error message
  * rpm spec file: add zsh completion (#447)
  * nvme: Release 1.7
- Drop obsolete patches:
  - 0001-Use-tnvmcap-register-for-creating-namespace.patch
  - 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
  - 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
  - 0004-nvme-cli-remove-unnecessary-assignments.patch
  - 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
  - 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
  - 0007-nvme-get-property-Add-documentation.patch
  - 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
  - 0010-nvme-models.c-search-for-pci.ids.patch
  - 0011-nvme-cli-add-ns-write-protect-feature-support.patch
  - 0012-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0013-nvme-cli-add-ana-log-documentation.patch
  - 0014-Fix-print-format-specifier-for-64-bit.patch
  - 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
  - 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
  - 0017-nvme-discover-sanitize-options.patch
  - 0018-Fix-nvme-id-namespace-struct.patch
  - 0019-nvme-cli-make-show_registers_cap-static.patch
  - 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
  - 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
  - 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
  - 0023-nvme-cli-remove-always-true-condition-for-u8.patch
  - 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
  - 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
  - 0026-nvme-cli-fix-scaandir-return-value.patch
  - 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
  - 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
  - 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
  - 0030-nvme-cli-use-uniform-error-message-for-open.patch
  - 0031-nvme-cli-fix-indentation.patch
  - 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
  - 0033-nvme-cli-mark-functions-static.patch
  - 0034-nvme-cli-make-malloc-error-handling-uniform.patch
  - 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
  - 0036-fabrics-make-some-arguments-integers.patch
  - 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
  - 0038-nvme-commonize-subsystems-info-in-a-helper.patch
  - 0039-fabrics-add-disconnect-all-command.patch
  - 0040-Regen-documentation.patch
  - 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
  - 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
  - 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
  - 0045-seagate-nvme-fixup-coding-style.patch
  - 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
  - 0047-nvme-cli-kill-nvme_passthru_admin.patch
  - 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
  - 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
  - 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
  - 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
  - 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
  - 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
  - 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
  - 0056-nvme-cli-prevent-resv-action-field-overflow.patch
  - 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
  - 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
  - 0059-nvme-cli-make-read-error-handling-uniform.patch
  - 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
  - 0061-Remove-unnecessary-asm-byteorder.h.patch
  - 0062-Remove-unnecessary-linux-types.h-include.patch
  - 0063-Include-libgen.h-for-basename-prototype.patch
  - 0064-Include-sys-stat.h.patch
  - 0065-nvme-cli-remove-endian.h.patch
  - 0066-We-don-t-need-to-include-linux-types.h-here.patch
  - 0067-Initialize-line.patch
  - 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
  - 0069-nvme-cli-fix-ioctl-argument.patch
  - 0070-nvme-cli-fix-a-typo.patch
  - 0071-Enable-code-block-syntax-highlight-in-README.md.patch
  - 0072-Makefile-fix-bash-completion-install-path.patch
  - 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
  - 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
  - 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
  - 0076-Update-documentation.patch
  - 0077-nvme.spec.in-fix-bash-completion-path-require.patch
  - 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
  - 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
  - 0080-Re-gen-documentation-for-new-files.patch
  - 0081-wdc-Fix-strncpy-warning.patch
  - 0082-Refactor-plugins-in-a-file-hierarchy.patch
  - 0083-nvme-cli-fix-sanitize-status-endianness.patch
  - 0084-nvme-cli-fix-ana-log-endianness.patch
  - 0085-wdc-Use-const-string-for-suffix.patch
  - 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
  - 0087-nvme-cli-fix-a-typo.patch
  - 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
  - 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
  - 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
  - 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
  - 0092-Added-zsh-completion-installation.patch
  - 0093-nvme-cli-fix-a-typo.patch
  - 0094-nvme-fixup-ANA-group-descriptor-offset.patch
  - 0095-nvme-introduce-get_nvme_ctrl_attr.patch
  - 0096-nvme-print-out-controller-state-for-list-subsys.patch
  - 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
  - 0099-Regen-documentation.patch
  - 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
  - 0101-Fix-printing-of-large-ANAGRPID-values.patch
  - 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
  - 0104-Fix-typos-in-docs.patch
  - 0105-Fix-typos-in-tests-and-utils.patch
  - 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
  - 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
  - 0108-nvme-Add-TCP-transport.patch
  - 0109-fabrics-add-tcp-port-tsas-decoding.patch
  - 0110-fabrics-add-transport-header-and-data-digest.patch
  - 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
  - 0112-Added-support-for-virtualization-management-command.patch
  - 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
  - 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
  - 0115-Added-gentoo-to-README.md.patch
  - 0116-fabrics-pass-in-number-of-write-queues.patch
  - 0117-fabrics-pass-in-number-of-polling-queues.patch
  - 0118-Update-documentation.patch
  - 0119-README-update-Arch-Linux-install-instructions.patch
  - 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
  - 0121-nvme-Adding-a-block-size-selector-to-format.patch
  - 0122-nvme-Regenerate-documentation.patch
  - 0123-timeout-option-added-to-ns_create-delete-440.patch
  - 0124-nvme-Remove-duplicate-error-message.patch
- Add patches from upstream git tree (FATE#326925)
  + 0001-wdc-Change-device-capability-checking.patch
  + 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  + 0003-generate-new-documentation.patch
  + 0004-Fix-compilation-with-GCC-8.patch
  + 0005-Fix-CFLAGS-parameter.patch
  + 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
- Add FC-NVMe autoconnect scripts (bsc#1103354)
  + 0100-nvme_fc-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.de" date="1549886400">- Regenerate documentation (bsc#1124713)
  * Add 0007-Regen-docs.patch
- Minor cleanup for submit_io (bsc#1124713)
  * Add 0008-nvme-cli-minor-cleanup-for-submit_io.patch
- Regenerate documentation ((bsc#1124713)
  * Add 0009-Regen-documentation.patch
- Fix fc_trtype string (bsc#1124713)
  * Add 0010-nvme-cli-fix-fc-trtype-string.patch
- Add 71-nvme-iopolicy-netapp.rules (bsc#1124564)
  * Add 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1552478400">- Add nvmefc-connect.target to allow stopping the parameterized
  services (bsc#1127076). Also change the service type so udevd
  doesn't have to wait for the termination of the service process.
  + 0102-Add-nvmefc-connect.target.patch
  + 0103-Change-service-to-type-simple.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1554897600">- Add new 'ontapdevices' command and corresponding documentation.
  Requested in (bsc#1131930).
  + 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  + 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  + 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Revert stop-on-failure patch for connect-all, which caused
  unintended behaviour (bsc#1132124)
  + 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1561291200">- Add script to determine host NQN based on the system UUID
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
</package>
<package pkgid="305b7594a020994afdb23f968e4d25996d5c26686e99802c09973df1b3bc1d3d" name="nvme-cli-regress-script" arch="x86_64">
  <version epoch="0" ver="1.7" rel="lp151.5.6.1"/>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1539691200">- Update to version v1.6 (FATE#326139, FATE#326434, FATE#326558):
  * Release 1.6
  * lightnvm: fix type coercion
  * fix reservation report 0's based dword count
  * nvme.c, list_ns: use le32_to_cpu in display
  * nvme-cli: adjust memset size for data buffer in submit_io
  * fabrics: omit newline character when reading nvme host nqn
  * fabrics: fail early if argconfig_parse failed
  * nvme-cli: print firmware activation notices support bit to id_ctrl
  * nvme-cli: add support of RAE
  * Add a single get-property command for NVMeOF.
  * nvme-ioctl.c : nvme_get_properties(): fix 64bit offset advance
  * nvme-cli: add support for DLFEAT
  * intel: fix latency stats printing
  * Update doc
  * nvme-cli: add changed-ns-list-log documentation
  * nvme-cli: add changed log ns support
  * NVMe-CLI Fix id-ns fpi field when Human Readable option selected.
  * Fix format specifier for 32-bit
  * Fix json output of 128-bit numbers
  * Replace host-gen telemetry short-option 'h' with 'g'
  * Add man pages for new device self test commands
  * Updating version to 1.1
  * nvme-cli: Implement printing get NOPSC feature
  * nvme-cli: Implement printing the get Keep Alive Timer feature
  * nvme-cli: Implement printing the get host controlled thermal management feature.
  * nvme-cli: Implement printing the get timestamp feature.
  * Adding ppc big endian support
  * Revert "nvme-cli: Wait for device file if not present after successful add_ctrl"
  * Revert "nvme-cli: Add ioctl retry support for "connect-all""
  * nvme-cli: fix compilation error
  * Updatign the plugin version
  * refactored some strings
  * Removed Duplicate commands.
  * Initial checkin for Seagate Plugin
  * nvme-cli: update the document for id-nvmset subcommand
  * nvme-cli: update new fields in id-ns subcommand
  * nvme-cli: add support for id-nvmset subcommand
  * Wrote man page for telemetry
  * nvme-cli: Implemented Device self test and log.
  * Add user parameter to specify data area region from telemetry log
  * Regenerate man pages
  * Documentation: allow to format with asciidoctor
  * Documentation: fix title markers
  * fabrics: add ctrl-loss-tmo to connect-all
  * nvme-cli: Modify Get Features-Asynchronous Event Configuration
  * Add open-channel 2.0 identify support
  * nvme-cli: fix show command typo
  * nvme-cli: Fix build breaks for GCC 8.1 Signed-off-by: Alexey Timofeyev &lt;alexey.timofeyev@sk.com&gt;
  * Add nvme id-ns command test
  * Add nvme id-ctrl command test
  * Add nvme fw-log commmand test
  * Add support for Micron plugin
  * nvme-cli: fix get_nsid() return value check
  * nvme-cli: allow block device for delete-ns
  * nvme-cli: Add ioctl retry support for "connect-all"
  * nvme-cli: Wait for device file if not present after successful add_ctrl
  * nvme-cli: show partial results if controller fails during list and list-subsys
  * fabrics: add option to supply keep-alive-timeout for connect-all
  * nvme-cli: fix perror when blkdev not given when get-ns-id
  * Fixes for log page access.
  * nvme-cli: make it return 0 in case of non-fabric for show-regs
  * Regenrate documentation
  * Documentation: add manpage entry for connect's --ctrl-loss-tmo setting
  * nvme-cli: fix leak in endurance_log command
  * nvme-cli: fix seg_fault by cmd options in endurance_log
  * Remove error print for telemetry log arg parse
  * Fix intel media wear json output
  * Use fixed-width integer types for long suffixed parameters
  * Add toshiba plugin to makefile rules.
  * Add toshiba plugin code and command documentation.
  * nvme-cli: Add friendly status messages
  * nvme-cli: correct spelling of discovery
  * get-log: Make log identifier a required parameter
  * nvme-cli: fabrics: Fix passing "host_traddr" for all transports
  * Log error incase of failure in get_nvme_subsystem_info()
  * Fix double free in list_subsys
  * Fix parameter descriptions
  * Add remaining fields from NVM Sets
  * Don't print non-existent command line options
  * Fixed a bug where cdw11 was being overwritten by cdw12
  * Regenerate documentation
  * Add manpage for endurance log
  * nvme-cli: fix typo in 'disconnect' docs
  * Fix fabrics property commands
  * Fix endianess in WDC plugin.
  * Ignore cscope files
  * Add read-recover level feature decoding
  * Add support for NVMe Sets log page
  * Add support for decoding IO Determinism features
  * Add decoding for new controller attributes
  * Update makefile dependencies
  * nvme-cli: add netapp smdevices man page
  * nvme-cli: add NetApp plugin
  * Fix freeing wrong address
  * nvme-cli: make it use NVME_IDENTIFY_DATA_SIZE
  * nvme-cli: adjust json print according to uint format
  * nvme-cli: add helper for sanitize command
  * nvme-cli: telemetry-log add controller initiated log gathering
  * flush: Use device NSID if issuing through block device
  * NVMe-CLI Fix fw_log Command json output
  * nvme-cli: fix typo in Intel SMART json output
  * nvme-cli: update documentations to sync up with subcommands
  * nvme-cli: convert iekey into a no_argument parameter
  * nvme-cli: make return negative value in nvme_get_nsid() when not blkdev
  * nvme-cli: move print-function to nvme-print
  * nvme-cli: fix leaks in subcommands
  * nvme-cli: add print for command name to effects-log
  * nvme-cli: make it have bpid in cdw10 for fw-commit
  * nvme-cli: add command specific field to json output of error-log
  * nvme-cli: Fixed incosistency of error handling in intel plugin Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * Use '-' for compounded word telemetry-log subcommand
  * Use NSID all for error log
  * nvme-cli: Implement nvme_get_log13
  * nvme-cli: handle long commands in help message by adjusting minimal padding Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * nvme-cli: wdc: Removed superfluous output in WDC plugin
  * NVMe-CLI WDC-Plugin Update drive essentials code with review comments.
  * nvme-cli: Add support of unsigned long long to json routines Signed-off-by: Oleksii Timofieiev &lt;tim.oleksii@gmail.com&gt;
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr documentation.
  * NVMe-CLI WDC-Plugin Add clear-pcie-corr command
  * NVMe-CLI WDC-Plugin Add drive-essentials documentation
  * NVMe-CLI WDC-Plugin Add drive-essentials command
  * nvme-cli: memblaze: add error return after parse_and_open()
  * nvme-cli: memblaze: fix memory leak in memblaze-nvme.c
  * nvme-cli: Implement get_telemetry_log from 1.3 spec
  * nvme/vendor: Add get log LSP/LSO fields from 1.3 spec
  * nvme-cli: lnvm: Make it return error status when argconfig_parse fails
  * nvme-cli: fix memory leak in passthru()
  * nvme-cli: wdc: fix mismatch in document for smart-add-log
  * nvme-cli: wdc: add const to descriptions
  * nvme-cli: fix memory leak in dir_receive()
  * nvme-cli: fix memory leak in sec_recv()
  * nvme-cli: fix memory leak in dir_send()
  * nvme-cli: fix memory leak in sec_send()
  * nvme-cli: fix memory leak in set_feature()
  * nvme-cli: fix memory leak in fw_download()
  * nvme-cli: fix memory leak in ns_descs()
  * nvme-cli: fix memory leak in list_ctrl()
  * nvme-cli: add error handling for a failure of malloc
  * nvme-cli: tests: fix typo in get_feature_test
  * nvme-cli: tests: remove nsid parameter in a testcase of error-log
  * nvme-cli: update documentation of effects-log
  * nvme-cli: add support for options to effects-log subcommand
  * nvme-cli: intel: add const to descriptions of subcommand option
  * nvme-cli: intel: add check for fd after open to intel commands
  * nvme-cli: intel: fix smart-log-add documentation
  * lightnvm: enable to set OP on target creation
  * nvme-cli: intel: update smart-log-add command documentation
  * nvme-cli: update error-log documentation
  * nvme-cli: lnvm: add human-readable print format to ns-id subcommand
  * nvme-cli: lnvm: add check for fd after open operation
  * nvme-cli: lnvm: remove unnecessary force parameter of ns-id in lnvm
  * nvme-cli: lnvm: add whitespace between words in a description
  * nvme-cli: add BPS bit field to CAP controller register
  * Update subcommand alias description in README.md
  * nvme-cli: add support for json output format of sanitize-log command
  * nvme-cli: Remove unnecessary nsid field in error-log
  * nvme-cli: add print for command specific info field of error log page
  * nvme-cli: update print for sanitize-log command with output-format
  * nvme-cli: make sanitize description const
  * Fix verbose decoding for coalescing aggregation time
  * Allow hierarchy of similiarly named plugins
  Drop:
  - 0001-nvme-cli-add-NetApp-plugin.patch
  - 0002-nvme-cli-add-netapp-smdevices-man-page.patch
  - 0003-get-log-Make-log-identifier-a-required-parameter.patch
  - 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch
  - 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch
  - 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch
  - 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
  - 0008-nvme-cli-Implement-nvme_get_log13.patch
  - 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
  - 0010-nvme-cli-add-support-of-RAE.patch
  - 0011-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0012-nvme-cli-add-ana-log-documentation.patch
  - 0013-nvme-discover-sanitize-options.patch
  - 0014-Fix-double-free-in-list_subsys.patch
  - 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
  - 0016-nvme-cli-move-print-function-to-nvme-print.patch
  - 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
  - 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
  - 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Use tnvmcap register for creating namespace (FATE#326925)
  + 0001-Use-tnvmcap-register-for-creating-namespace.patch
- don't execute a command if --dry-run is supplied (FATE#326925)
  + 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
- Remove trailing "\n" so that the output is valid json (FATE#326925)
  + 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
- nvme-cli: remove unnecessary assignments (FATE#326925)
  + 0004-nvme-cli-remove-unnecessary-assignments.patch
- nvme-print.c : fix ns-descs JSON output (FATE#326925)
  + 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
- nvme-cli: fix typo in json_print_list_items (FATE#326925)
  + 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
- nvme-get-property : Add documentation (FATE#326925)
  + 0007-nvme-get-property-Add-documentation.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (FATE#326925)
  + 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on (FATE#326925)
  + 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
- nvme-models.c - search for pci.ids (FATE#326925)
  + 0010-nvme-models.c-search-for-pci.ids.patch
- nvme-cli add ns write protect feature support (FATE#326925)
  + 0011-nvme-cli-add-ns-write-protect-feature-support.patch
- nvme-cli: add minimal ana-log page support (FATE#326925)
  + 0012-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana-log documentation (FATE#326925)
  + 0013-nvme-cli-add-ana-log-documentation.patch
- Fix print format specifier for 64-bit (FATE#326925)
  + 0014-Fix-print-format-specifier-for-64-bit.patch
- nvme-ana-log: fixup compiler warning in show_ana_log() (FATE#326925)
  + 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
- nvme-vendor: fixup c99 declaration in huawei plugin (FATE#326925)
  + 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
- nvme-discover: sanitize options (FATE#326925)
  + 0017-nvme-discover-sanitize-options.patch
- Fix nvme id namespace struct (FATE#326925)
  + 0018-Fix-nvme-id-namespace-struct.patch
- nvme-cli: make show_registers_cap() static (FATE#326925)
  + 0019-nvme-cli-make-show_registers_cap-static.patch
- nvme-cli: wdc-plugin mark array static declaration (FATE#326925)
  + 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
- nvme-cli: fix sparse warnings for declaration (FATE#326925)
  + 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
- nvme-cli: don't use unsigned for fd in lnvm-nvme.c (FATE#326925)
  + 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
- nvme-cli: remove always true condition for u8 (FATE#326925)
  + 0023-nvme-cli-remove-always-true-condition-for-u8.patch
- nvme-cli: fix dead-code nvmf log page discovery (FATE#326925)
  + 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
- nvme-cli: code cleanup for passthru() handlers (FATE#326925)
  + 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
- nvme-cli: fix scaandir() return value (FATE#326925)
  + 0026-nvme-cli-fix-scaandir-return-value.patch
- nvme-cli: netapp plugin handle empty strings (FATE#326925)
  + 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
- nvme-cli: Fix the displayed metadata length value on Big (FATE#326925)
  + 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
- nvme list : fix nvme list output if identify failed on device (FATE#326925)
  + 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch
- nvme-cli: use uniform error message for open (FATE#326925)
  + 0030-nvme-cli-use-uniform-error-message-for-open.patch~
- nvme-cli: fix indentation (FATE#326925)
  + 0031-nvme-cli-fix-indentation.patch
- nvme-cli: make wdc plug-in functions static (FATE#326925)
  + 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
- nvme-cli: mark functions static (FATE#326925)
  + 0033-nvme-cli-mark-functions-static.patch
- nvme-cli: make malloc error handling uniform (FATE#326925)
  + 0034-nvme-cli-make-malloc-error-handling-uniform.patch
- Enlarge local char[] so snprintf(3) can't truncate path. (FATE#326925)
  + 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
- fabrics: make some arguments integers (FATE#326925)
  + 0036-fabrics-make-some-arguments-integers.patch
- fabrics: don't fail empty discovery log page (FATE#326925)
  + 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
- nvme: commonize subsystems info in a helper (FATE#326925)
  + 0038-nvme-commonize-subsystems-info-in-a-helper.patch
- fabrics: add disconnect-all command (FATE#326925)
  + 0039-fabrics-add-disconnect-all-command.patch
- Regen documentation (FATE#326925)
  + 0040-Regen-documentation.patch
- attach-ns : fix segfault for ctrl list wrong input (FATE#326925)
  + 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
- nvme-discover: Retry discovery log if the generation counter (FATE#326925)
  + 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-ioctl: retrieve log pages in 4k chunks (FATE#326925)
  + 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
- nvme-discover: Re-check generation counter after log page (FATE#326925)
  + 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
- seagate-nvme: fixup coding style (FATE#326925)
  + 0045-seagate-nvme-fixup-coding-style.patch
- nvme-cli: Add 'rae' argument to nvme_get_log() (FATE#326925)
  + 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
- nvme-cli: kill nvme_passthru_admin() (FATE#326925)
  + 0047-nvme-cli-kill-nvme_passthru_admin.patch
- nvme-cli: print "\n" after nvme list-subsys -o json (FATE#326925)
  + 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
- nvme-cli: tests: fix fw_log test coding style (FATE#326925)
  + 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
- nvme-cli: tests: fix id_ctrl test coding style (FATE#326925)
  + 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
- nvme-cli: tests: fix id_ns test coding style (FATE#326925)
  + 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
- nvme-cli: tests: Add get_id_ctrl function (FATE#326925)
  + 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
- Add PCI device id checking for the WDC plugin commands. (FATE#326925)
  + 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
- Fix nvme test device selection to use controller value (FATE#326925)
  + 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
- nvme-cli: prevent resv action field overflow (FATE#326925)
  + 0056-nvme-cli-prevent-resv-action-field-overflow.patch
- nvme-cli: report subsystem-reset not supported by controller (FATE#326925)
  + 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
- nvme-cli: fix indentation for dir_[send/receive] (FATE#326925)
  + 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
- nvme-cli: make read error handling uniform (FATE#326925)
  + 0059-nvme-cli-make-read-error-handling-uniform.patch
- Use sys/ioctl.h to pull in definitions. (FATE#326925)
  + 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
- Remove unnecessary asm/byteorder.h (FATE#326925)
  + 0061-Remove-unnecessary-asm-byteorder.h.patch
- Remove unnecessary linux/types.h include. (FATE#326925)
  + 0062-Remove-unnecessary-linux-types.h-include.patch
- Include libgen.h for basename prototype. (FATE#326925)
  + 0063-Include-libgen.h-for-basename-prototype.patch
- Include sys/stat.h (FATE#326925)
  + 0064-Include-sys-stat.h.patch
- nvme-cli: remove endian.h (FATE#326925)
  + 0065-nvme-cli-remove-endian.h.patch
- We don't need to include linux/types.h here. (FATE#326925)
  + 0066-We-don-t-need-to-include-linux-types.h-here.patch
- Initialize line. (FATE#326925)
  + 0067-Initialize-line.patch
- Use standard interfaces to get timezone offsets. (FATE#326925)
  + 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
- nvme-cli: fix ioctl argument (FATE#326925)
  + 0069-nvme-cli-fix-ioctl-argument.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0070-nvme-cli-fix-a-typo.patch
- Enable code block syntax highlight in README.md (FATE#326925)
  + 0071-Enable-code-block-syntax-highlight-in-README.md.patch
- Makefile: fix bash completion install path (FATE#326925)
  + 0072-Makefile-fix-bash-completion-install-path.patch
- NVMe-CLI WDC Plugin - Simplify the device id checking (FATE#326925)
  + 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
- nvme-cli: Add wdc-plugin command vs-internal-log and update (FATE#326925)
  + 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
- nvme-cli: Add help text for wdc-plugin command (FATE#326925)
  + 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
- Update documentation (FATE#326925)
  + 0076-Update-documentation.patch
- nvme.spec.in : fix bash completion path, require (FATE#326925)
  + 0077-nvme.spec.in-fix-bash-completion-path-require.patch
- nvme-cli wdc plugin: Add get pfail dump command. (FATE#326925)
  + 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
- nvme-cli wdc plugin: Add documentation for pfail dump. (FATE#326925)
  + 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
- Re-gen documentation for new files (FATE#326925)
  + 0080-Re-gen-documentation-for-new-files.patch
- wdc: Fix strncpy warning (FATE#326925)
  + 0081-wdc-Fix-strncpy-warning.patch
- Refactor plugins in a file hierarchy (FATE#326925)
  + 0082-Refactor-plugins-in-a-file-hierarchy.patch
- nvme-cli: fix sanitize status endianness (FATE#326925)
  + 0083-nvme-cli-fix-sanitize-status-endianness.patch
- nvme-cli: fix ana-log endianness (FATE#326925)
  + 0084-nvme-cli-fix-ana-log-endianness.patch
- wdc: Use const string for suffix (FATE#326925)
  + 0085-wdc-Use-const-string-for-suffix.patch
- nvme-cli:fix a typo in SELF-TEST log (FATE#326925)
  + 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0087-nvme-cli-fix-a-typo.patch
- nvme-cli: fix array len to hold string of size 4 (FATE#326925)
  + 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
- nvme-cli: fix endianness for the structure field (FATE#326925)
  + 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
- nvme: Handle supported capabilities result for get features (FATE#326925)
  + 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
- connect-all: special treatment to EALREADY afetr write to (FATE#326925)
  + 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
- Added zsh completion installation (FATE#326925)
  + 0092-Added-zsh-completion-installation.patch
- nvme-cli: fix a typo (FATE#326925)
  + 0093-nvme-cli-fix-a-typo.patch
- nvme: fixup ANA group descriptor offset (FATE#326925)
  + 0094-nvme-fixup-ANA-group-descriptor-offset.patch
- nvme: introduce get_nvme_ctrl_attr() (FATE#326925)
  + 0095-nvme-introduce-get_nvme_ctrl_attr.patch
- nvme: print out controller state for 'list-subsys' (FATE#326925)
  + 0096-nvme-print-out-controller-state-for-list-subsys.patch
- nvme-list-subsys: Add device name argument and print out ANA (FATE#326925)
  + 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
- list-subsys: Preserve line breaks and spaces (FATE#326925)
  + 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
- Regen documentation (FATE#326925)
  + 0099-Regen-documentation.patch
- In json output, if the commands add zero length string, it (FATE#326123)
  + 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0101-Fix-printing-of-large-ANAGRPID-values.patch
- micron-nvme: Replace direct use of ioctl (FATE#326123)
  + 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
- Fix printing of large ANAGRPID values (FATE#326123)
  + 0103-Fix-printing-of-large-ANAGRPID-values.patch
- Fix typos in docs (FATE#326123)
  + 0104-Fix-typos-in-docs.patch
- Fix typos in tests and utils (FATE#326123)
  + 0105-Fix-typos-in-tests-and-utils.patch
- fabrics: support fabrics sq flow control disable (FATE#326123)
  + 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
- fabrics: use trtype_str when parsing a discovery log entry (FATE#326123)
  + 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
- nvme: Add TCP transport (FATE#326123)
  + 0108-nvme-Add-TCP-transport.patch
- fabrics: add tcp port tsas decoding (FATE#326123)
  + 0109-fabrics-add-tcp-port-tsas-decoding.patch
- fabrics: add transport header and data digest (FATE#326123)
  + 0110-fabrics-add-transport-header-and-data-digest.patch
- nvme-ioctl: clear rae for discovery log pages (FATE#326123)
  + 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
- Added support for virtualization-management command (FATE#326123)
  + 0112-Added-support-for-virtualization-management-command.patch
- nvme-cli: Don't print result on passthru error (FATE#326123)
  + 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
- nvme-cli: readme: fix typo in Alpine distro support (FATE#326123)
  + 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
- Added gentoo to README.md (FATE#326123)
  + 0115-Added-gentoo-to-README.md.patch
- fabrics: pass in number of write queues (FATE#326123)
  + 0116-fabrics-pass-in-number-of-write-queues.patch
- fabrics: pass in number of polling queues (FATE#326123)
  + 0117-fabrics-pass-in-number-of-polling-queues.patch
- Update documentation (FATE#326123)
  + 0118-Update-documentation.patch
- README: update Arch Linux install instructions (FATE#326123)
  + 0119-README-update-Arch-Linux-install-instructions.patch
- fabrics: allow nr_io/write/poll_queues and queue size to (FATE#326123)
  + 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
- nvme: Adding a block size selector to format (FATE#326123)
  + 0121-nvme-Adding-a-block-size-selector-to-format.patch
- nvme: Regenerate documentation (FATE#326123)
  + 0122-nvme-Regenerate-documentation.patch
- timeout option added to ns_create/delete (#440) (FATE#326123)
  + 0123-timeout-option-added-to-ns_create-delete-440.patch
- nvme: Remove duplicate error message (FATE#326123)
  + 0124-nvme-Remove-duplicate-error-message.patch</changelog>
  <changelog author="hare@suse.com" date="1548676800">- Update to version 1.7:
  * Use tnvmcap register for creating namespace
  * don't execute a command if --dry-run is supplied
  * Remove trailing "\n" so that the output is valid json
  * nvme-cli: remove unnecessary assignments
  * nvme-print.c : fix ns-descs JSON output
  * nvme-cli: fix typo in json_print_list_items
  * nvme-get-property : Add documentation
  * fabrics: write ctrl_loss_tmo to fabrics device on connect
  * fabrics: write keep-alive-timeout to fabrics device on connect
  * nvme-models.c - search for pci.ids
  * nvme-cli add ns write protect feature support
  * nvme-cli: add minimal ana-log page support
  * nvme-cli: add ana-log documentation
  * Fix print format specifier for 64-bit
  * nvme-ana-log: fixup compiler warning in show_ana_log()
  * nvme-vendor: fixup c99 declaration in huawei plugin
  * nvme-discover: sanitize options
  * Fix nvme id namespace struct
  * nvme-cli: make show_registers_cap() static
  * nvme-cli: wdc-plugin mark array static declaration
  * nvme-cli: fix sparse warnings for declaration
  * nvme-cli: don't use unsigned for fd in lnvm-nvme.c
  * nvme-cli: remove always true condition for u8
  * nvme-cli: fix dead-code nvmf log page discovery
  * nvme-cli: code cleanup for passthru() handlers
  * nvme-cli: fix scaandir() return value
  * nvme-cli: netapp plugin handle empty strings
  * nvme-cli: Fix the displayed metadata length value on Big Endian systems.
  * nvme list : fix nvme list output if identify failed on device
  * nvme-cli: use uniform error message for open
  * nvme-cli: fix indentation
  * nvme-cli: make wdc plug-in functions static
  * nvme-cli: mark functions static
  * nvme-cli: make malloc error handling uniform
  * Enlarge local char[] so snprintf(3) can't truncate path.
  * fabrics: make some arguments integers
  * fabrics: don't fail empty discovery log page
  * nvme: commonize subsystems info in a helper
  * fabrics: add disconnect-all command
  * Regen documentation
  * attach-ns : fix segfault for ctrl list wrong input
  * nvme-discover: Retry discovery log if the generation counter changes
  * nvme-ioctl: retrieve log pages in 4k chunks
  * nvme-discover: Re-check generation counter after log page transfer
  * seagate-nvme: fixup coding style
  * nvme-cli: Add 'rae' argument to nvme_get_log()
  * nvme-cli: kill nvme_passthru_admin()
  * nvme-cli: print "\n" after nvme list-subsys -o json
  * nvme-cli: tests: fix fw_log test coding style
  * nvme-cli: tests: fix id_ctrl test coding style
  * nvme-cli: tests: fix id_ns test coding style
  * nvme-cli: tests: Add get_id_ctrl function
  * Update gitignore for generated test files
  * Add PCI device id checking for the WDC plugin commands.
  * Fix nvme test device selection to use controller value defined in the config.json file. Before this fix, the value was hard coded to nvme0.
  * nvme-cli: prevent resv action field overflow
  * nvme-cli: report subsystem-reset not supported by controller
  * nvme-cli: fix indentation for dir_[send/receive]
  * nvme-cli: make read error handling uniform
  * Use sys/ioctl.h to pull in definitions.
  * Remove unnecessary asm/byteorder.h
  * Remove unnecessary linux/types.h include.
  * Include libgen.h for basename prototype.
  * Include sys/stat.h
  * nvme-cli: remove endian.h
  * We don't need to include linux/types.h here.
  * Initialize line.
  * Use standard interfaces to get timezone offsets.
  * nvme-cli: fix ioctl argument
  * nvme-cli: fix a typo
  * Enable code block syntax highlight in README.md
  * Makefile: fix bash completion install path
  * NVMe-CLI WDC Plugin - Simplify the device id checking routines.
  * nvme-cli: Add wdc-plugin command vs-internal-log and update wdc-plug cap-diag command with transfer-size parameter.
  * nvme-cli: Add help text for wdc-plugin command vs-internal-log. Update help text for wdc-plugin command cap-diag.
  * Update documentation
  * nvme.spec.in : fix bash completion path, require
  * nvme-cli wdc plugin: Add get pfail dump command.
  * nvme-cli wdc plugin: Add documentation for pfail dump.
  * Re-gen documentation for new files
  * wdc: Fix strncpy warning
  * Refactor plugins in a file hierarchy
  * nvme-cli: fix sanitize status endianness
  * nvme-cli: fix ana-log endianness
  * wdc: Use const string for suffix
  * nvme-cli:fix a typo in SELF-TEST log
  * nvme-cli: fix a typo
  * nvme-cli: fix array len to hold string of size 4
  * nvme-cli: fix endianness for the structure field
  * nvme: Handle supported capabilities result for get features
  * connect-all: special treatment to EALREADY afetr write to /dev/nvme-fabrics
  * Added zsh completion installation
  * nvme-cli: fix a typo
  * nvme: fixup ANA group descriptor offset
  * nvme: introduce get_nvme_ctrl_attr()
  * nvme: print out controller state for 'list-subsys'
  * nvme-list-subsys: Add device name argument and print out ANA state
  * list-subsys: Preserve line breaks and spaces
  * Regen documentation
  * In json output, if the commands add zero length string, it occur allocation fail &amp; abort (cannot display empty value)
  * Fix printing of large ANAGRPID values
  * micron-nvme: Replace direct use of ioctl
  * Fix printing of large ANAGRPID values
  * Fix typos in docs
  * Fix typos in tests and utils
  * fabrics: support fabrics sq flow control disable
  * fabrics: use trtype_str when parsing a discovery log entry
  * nvme: Add TCP transport
  * fabrics: add tcp port tsas decoding
  * fabrics: add transport header and data digest
  * nvme-ioctl: clear rae for discovery log pages
  * Added support for virtualization-management command
  * nvme-cli: Don't print result on passthru error
  * nvme-cli: readme: fix typo in Alpine distro support
  * Added gentoo to README.md
  * fabrics: pass in number of write queues
  * fabrics: pass in number of polling queues
  * Update documentation
  * README: update Arch Linux install instructions
  * fabrics: allow nr_io/write/poll_queues and queue size to discovery
  * nvme: Adding a block size selector to format
  * nvme: Regenerate documentation
  * timeout option added to ns_create/delete (#440)
  * nvme: Remove duplicate error message
  * rpm spec file: add zsh completion (#447)
  * nvme: Release 1.7
- Drop obsolete patches:
  - 0001-Use-tnvmcap-register-for-creating-namespace.patch
  - 0002-don-t-execute-a-command-if-dry-run-is-supplied.patch
  - 0003-Remove-trailing-n-so-that-the-output-is-valid-json.patch
  - 0004-nvme-cli-remove-unnecessary-assignments.patch
  - 0005-nvme-print.c-fix-ns-descs-JSON-output.patch
  - 0006-nvme-cli-fix-typo-in-json_print_list_items.patch
  - 0007-nvme-get-property-Add-documentation.patch
  - 0008-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
  - 0009-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch
  - 0010-nvme-models.c-search-for-pci.ids.patch
  - 0011-nvme-cli-add-ns-write-protect-feature-support.patch
  - 0012-nvme-cli-add-minimal-ana-log-page-support.patch
  - 0013-nvme-cli-add-ana-log-documentation.patch
  - 0014-Fix-print-format-specifier-for-64-bit.patch
  - 0015-nvme-ana-log-fixup-compiler-warning-in-show_ana_log.patch
  - 0016-nvme-vendor-fixup-c99-declaration-in-huawei-plugin.patch
  - 0017-nvme-discover-sanitize-options.patch
  - 0018-Fix-nvme-id-namespace-struct.patch
  - 0019-nvme-cli-make-show_registers_cap-static.patch
  - 0020-nvme-cli-wdc-plugin-mark-array-static-declaration.patch
  - 0021-nvme-cli-fix-sparse-warnings-for-declaration.patch
  - 0022-nvme-cli-don-t-use-unsigned-for-fd-in-lnvm-nvme.c.patch
  - 0023-nvme-cli-remove-always-true-condition-for-u8.patch
  - 0024-nvme-cli-fix-dead-code-nvmf-log-page-discovery.patch
  - 0025-nvme-cli-code-cleanup-for-passthru-handlers.patch
  - 0026-nvme-cli-fix-scaandir-return-value.patch
  - 0027-nvme-cli-netapp-plugin-handle-empty-strings.patch
  - 0028-nvme-cli-Fix-the-displayed-metadata-length-value-on-.patch
  - 0029-nvme-list-fix-nvme-list-output-if-identify-failed-on.patch
  - 0030-nvme-cli-use-uniform-error-message-for-open.patch
  - 0031-nvme-cli-fix-indentation.patch
  - 0032-nvme-cli-make-wdc-plug-in-functions-static.patch
  - 0033-nvme-cli-mark-functions-static.patch
  - 0034-nvme-cli-make-malloc-error-handling-uniform.patch
  - 0035-Enlarge-local-char-so-snprintf-3-can-t-truncate-path.patch
  - 0036-fabrics-make-some-arguments-integers.patch
  - 0037-fabrics-don-t-fail-empty-discovery-log-page.patch
  - 0038-nvme-commonize-subsystems-info-in-a-helper.patch
  - 0039-fabrics-add-disconnect-all-command.patch
  - 0040-Regen-documentation.patch
  - 0041-attach-ns-fix-segfault-for-ctrl-list-wrong-input.patch
  - 0042-nvme-discover-Retry-discovery-log-if-the-generation-.patch
  - 0043-nvme-ioctl-retrieve-log-pages-in-4k-chunks.patch
  - 0044-nvme-discover-Re-check-generation-counter-after-log-.patch
  - 0045-seagate-nvme-fixup-coding-style.patch
  - 0046-nvme-cli-Add-rae-argument-to-nvme_get_log.patch
  - 0047-nvme-cli-kill-nvme_passthru_admin.patch
  - 0048-nvme-cli-print-n-after-nvme-list-subsys-o-json.patch
  - 0049-nvme-cli-tests-fix-fw_log-test-coding-style.patch
  - 0050-nvme-cli-tests-fix-id_ctrl-test-coding-style.patch
  - 0051-nvme-cli-tests-fix-id_ns-test-coding-style.patch
  - 0052-nvme-cli-tests-Add-get_id_ctrl-function.patch
  - 0054-Add-PCI-device-id-checking-for-the-WDC-plugin-comman.patch
  - 0055-Fix-nvme-test-device-selection-to-use-controller-val.patch
  - 0056-nvme-cli-prevent-resv-action-field-overflow.patch
  - 0057-nvme-cli-report-subsystem-reset-not-supported-by-con.patch
  - 0058-nvme-cli-fix-indentation-for-dir_-send-receive.patch
  - 0059-nvme-cli-make-read-error-handling-uniform.patch
  - 0060-Use-sys-ioctl.h-to-pull-in-definitions.patch
  - 0061-Remove-unnecessary-asm-byteorder.h.patch
  - 0062-Remove-unnecessary-linux-types.h-include.patch
  - 0063-Include-libgen.h-for-basename-prototype.patch
  - 0064-Include-sys-stat.h.patch
  - 0065-nvme-cli-remove-endian.h.patch
  - 0066-We-don-t-need-to-include-linux-types.h-here.patch
  - 0067-Initialize-line.patch
  - 0068-Use-standard-interfaces-to-get-timezone-offsets.patch
  - 0069-nvme-cli-fix-ioctl-argument.patch
  - 0070-nvme-cli-fix-a-typo.patch
  - 0071-Enable-code-block-syntax-highlight-in-README.md.patch
  - 0072-Makefile-fix-bash-completion-install-path.patch
  - 0073-NVMe-CLI-WDC-Plugin-Simplify-the-device-id-checking-.patch
  - 0074-nvme-cli-Add-wdc-plugin-command-vs-internal-log-and-.patch
  - 0075-nvme-cli-Add-help-text-for-wdc-plugin-command-vs-int.patch
  - 0076-Update-documentation.patch
  - 0077-nvme.spec.in-fix-bash-completion-path-require.patch
  - 0078-nvme-cli-wdc-plugin-Add-get-pfail-dump-command.patch
  - 0079-nvme-cli-wdc-plugin-Add-documentation-for-pfail-dump.patch
  - 0080-Re-gen-documentation-for-new-files.patch
  - 0081-wdc-Fix-strncpy-warning.patch
  - 0082-Refactor-plugins-in-a-file-hierarchy.patch
  - 0083-nvme-cli-fix-sanitize-status-endianness.patch
  - 0084-nvme-cli-fix-ana-log-endianness.patch
  - 0085-wdc-Use-const-string-for-suffix.patch
  - 0086-nvme-cli-fix-a-typo-in-SELF-TEST-log.patch
  - 0087-nvme-cli-fix-a-typo.patch
  - 0088-nvme-cli-fix-array-len-to-hold-string-of-size-4.patch
  - 0089-nvme-cli-fix-endianness-for-the-structure-field.patch
  - 0090-nvme-Handle-supported-capabilities-result-for-get-fe.patch
  - 0091-connect-all-special-treatment-to-EALREADY-afetr-writ.patch
  - 0092-Added-zsh-completion-installation.patch
  - 0093-nvme-cli-fix-a-typo.patch
  - 0094-nvme-fixup-ANA-group-descriptor-offset.patch
  - 0095-nvme-introduce-get_nvme_ctrl_attr.patch
  - 0096-nvme-print-out-controller-state-for-list-subsys.patch
  - 0097-nvme-list-subsys-Add-device-name-argument-and-print-.patch
  - 0098-list-subsys-Preserve-line-breaks-and-spaces.patch
  - 0099-Regen-documentation.patch
  - 0100-In-json-output-if-the-commands-add-zero-length-strin.patch
  - 0101-Fix-printing-of-large-ANAGRPID-values.patch
  - 0102-micron-nvme-Replace-direct-use-of-ioctl.patch
  - 0104-Fix-typos-in-docs.patch
  - 0105-Fix-typos-in-tests-and-utils.patch
  - 0106-fabrics-support-fabrics-sq-flow-control-disable.patch
  - 0107-fabrics-use-trtype_str-when-parsing-a-discovery-log-.patch
  - 0108-nvme-Add-TCP-transport.patch
  - 0109-fabrics-add-tcp-port-tsas-decoding.patch
  - 0110-fabrics-add-transport-header-and-data-digest.patch
  - 0111-nvme-ioctl-clear-rae-for-discovery-log-pages.patch
  - 0112-Added-support-for-virtualization-management-command.patch
  - 0113-nvme-cli-Don-t-print-result-on-passthru-error.patch
  - 0114-nvme-cli-readme-fix-typo-in-Alpine-distro-support.patch
  - 0115-Added-gentoo-to-README.md.patch
  - 0116-fabrics-pass-in-number-of-write-queues.patch
  - 0117-fabrics-pass-in-number-of-polling-queues.patch
  - 0118-Update-documentation.patch
  - 0119-README-update-Arch-Linux-install-instructions.patch
  - 0120-fabrics-allow-nr_io-write-poll_queues-and-queue-size.patch
  - 0121-nvme-Adding-a-block-size-selector-to-format.patch
  - 0122-nvme-Regenerate-documentation.patch
  - 0123-timeout-option-added-to-ns_create-delete-440.patch
  - 0124-nvme-Remove-duplicate-error-message.patch
- Add patches from upstream git tree (FATE#326925)
  + 0001-wdc-Change-device-capability-checking.patch
  + 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  + 0003-generate-new-documentation.patch
  + 0004-Fix-compilation-with-GCC-8.patch
  + 0005-Fix-CFLAGS-parameter.patch
  + 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
- Add FC-NVMe autoconnect scripts (bsc#1103354)
  + 0100-nvme_fc-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.de" date="1549886400">- Regenerate documentation (bsc#1124713)
  * Add 0007-Regen-docs.patch
- Minor cleanup for submit_io (bsc#1124713)
  * Add 0008-nvme-cli-minor-cleanup-for-submit_io.patch
- Regenerate documentation ((bsc#1124713)
  * Add 0009-Regen-documentation.patch
- Fix fc_trtype string (bsc#1124713)
  * Add 0010-nvme-cli-fix-fc-trtype-string.patch
- Add 71-nvme-iopolicy-netapp.rules (bsc#1124564)
  * Add 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1552478400">- Add nvmefc-connect.target to allow stopping the parameterized
  services (bsc#1127076). Also change the service type so udevd
  doesn't have to wait for the termination of the service process.
  + 0102-Add-nvmefc-connect.target.patch
  + 0103-Change-service-to-type-simple.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1554897600">- Add new 'ontapdevices' command and corresponding documentation.
  Requested in (bsc#1131930).
  + 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  + 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  + 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Revert stop-on-failure patch for connect-all, which caused
  unintended behaviour (bsc#1132124)
  + 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="Simon Schricker &lt;sschricker@suse.com&gt;" date="1561291200">- Add script to determine host NQN based on the system UUID
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
</package>
<package pkgid="a401b0e7fe4e4ed08de297bd4cd486e99592fc5b2a7d4bf3752bc6b3d502afb1" name="obs-service-replace_using_package_version" arch="noarch">
  <version epoch="0" ver="0.0.3" rel="lp151.2.3.1"/>
  <changelog author="containers@suse.com" date="1521547200">- Update to version 1521564356.3457a22:
  * Remove makefile
  * Include LICENSE file into the RPM package
  * Update changes log format
  * Add GPLv3 License
  * Improve README
  * check rpm db of installed packages first
  * Adding simple changelog generator
  * Update installation strategy
  * Fix ./setup.py install
  * Adding travis.yml file</changelog>
  <changelog author="containers@suse.com" date="1521547201">- Update to version 1521565666.36ea78a:
  * Minor changes</changelog>
  <changelog author="containers@suse.com" date="1539086400">- Update to version 1539069197.d0e12bd:
  * Bump version: 0.0.1 ? 0.0.2
  * Add bumpversion support
  * Add the `--parse-version` flag (fixes bsc#1111089)
  * Add a simple example in README.md
  * Adjusting readme and tests code style</changelog>
  <changelog author="containers@suse.com" date="1561464000">- Update to version 1561476096.079b75f:
  * Bump version: 0.0.2 ? 0.0.3
  * new patch_update and offset parameters (bsc#1139343)</changelog>
</package>
<package pkgid="2aae013497594a75a4a8b77cad0b1cba559452239a2f921153562bd96721aa09" name="obs-service-replace_using_package_version" arch="src">
  <version epoch="0" ver="0.0.3" rel="lp151.2.3.1"/>
  <changelog author="containers@suse.com" date="1521547200">- Update to version 1521564356.3457a22:
  * Remove makefile
  * Include LICENSE file into the RPM package
  * Update changes log format
  * Add GPLv3 License
  * Improve README
  * check rpm db of installed packages first
  * Adding simple changelog generator
  * Update installation strategy
  * Fix ./setup.py install
  * Adding travis.yml file</changelog>
  <changelog author="containers@suse.com" date="1521547201">- Update to version 1521565666.36ea78a:
  * Minor changes</changelog>
  <changelog author="containers@suse.com" date="1539086400">- Update to version 1539069197.d0e12bd:
  * Bump version: 0.0.1 ? 0.0.2
  * Add bumpversion support
  * Add the `--parse-version` flag (fixes bsc#1111089)
  * Add a simple example in README.md
  * Adjusting readme and tests code style</changelog>
  <changelog author="containers@suse.com" date="1561464000">- Update to version 1561476096.079b75f:
  * Bump version: 0.0.2 ? 0.0.3
  * new patch_update and offset parameters (bsc#1139343)</changelog>
</package>
<package pkgid="ff9aef6b59d810f55bda0f12bf0d54830b544c731d9c869e8adc38fb69508857" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="0036c0a1c68a2c6b7e4e56786f852ad3dc2e8e19aae1e8397628f48967957f00" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="b6cccd406f2258cfae67851d68b19a9ffc18e062bd7bcddcdec2f1400e119279" name="open-vm-tools" arch="src">
  <version epoch="0" ver="10.3.10" rel="lp151.2.3.1"/>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
  <changelog author="kallan@suse.com" date="1541764800">- Update to 10.3.5 (build 10430147) (boo#1115118)
  + While running a quiesced snapshot of a Linux guest onthe vSphere hosts
    earlier than version 6.7, open-vm-tools logs warning messages.
  + CreateTemporaryFileInGuest/CreateTemporaryDirectoryInGuest returns a file
    path that does not exist.
  + Excessive spikes of the Memory/Workload percentagemetric, in a vRealize
    Operations cluster.
  + open-vm-tools Service running as vmusr crashes on Linux systems which are
    not running on the VMware platform.
- Drop unnecessary patch:
  - false-negative-cloud-init.patch
  - handle-linux-kernel-stat-overflow.patch
  - optional-override-os-name.patch</changelog>
  <changelog author="kallan@suse.com" date="1548763200">- Update vmtoolsd.service to support cloud-init customization by default
  by adding "DefaultDependencies=no" and "Before=cloud-init-local.service"
  to the [Unit] section of vmtoolsd.service (bsc#1121964) .
- Copyright year updated in spec file.</changelog>
  <changelog author="kallan@suse.com" date="1549627200">- Link VGAuthService to libxmlsec1 rather than libxml-security-c in SLE
  products where available. (bsc#1122435)
- Add patches to correct and/or improve handling of certain quiesced snapshot
  failures (bsc#1124397).
  + no_manifest_on_aborted_snapshot.patch
    Don't send a backup manifest when aborting a Linux quiesced snapshot.
  + vmtoolsd_bailout_on_rpc_errors.patch
    Bail out vmtoolsd early when there are RPC errors.
  + send_vmbackup_event_generic_manifest.patch
    Always send VMBACKUP_EVENT_GENERIC_MANIFEST during quiesced snapshots.
  + include_log_h_for_g_info.patch
    Include vmware/tools/log.h to define g_info.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warnings.patch (bsc#1126102).</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1552478400">- Link VGAuthService to libxmlsec1 rather than libxml-security-c for
  SLES 15 and SLES 15 SP1. It requires libxmlsec1 to be available in the
  base.  VGAuthService is already being linked with libxmlsec1 for
  SLES 12 SP4.  (bsc#1122435)</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1553860800">- Update to 10.3.10 (build 12406962) (boo#1130898)
  + Resolved - In certain cases, quiesced snapshots on Linux guests do not
    include backup manifests.
- Drop unnecessary patch:
  - include_log_h_for_g_info.patch
  - no_manifest_on_aborted_snapshot.patch
  - send_vmbackup_event_generic_manifest.patch
  - vmtoolsd_bailout_on_rpc_errors.patch</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1557230400">- Update vmtoolsd.service tools to run after the network service is
  ready. (bsc#1133623)
- Link VGAuthService to libxmlsec1 rather than libxml-security-c in
  SLES 12 SP3. (bsc#1122435)</changelog>
</package>
<package pkgid="27ac500614e8c2a1668ee15e262599ffad971b7eff8c8bce115454a530d69857" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="10.3.10" rel="lp151.2.3.1"/>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
  <changelog author="kallan@suse.com" date="1541764800">- Update to 10.3.5 (build 10430147) (boo#1115118)
  + While running a quiesced snapshot of a Linux guest onthe vSphere hosts
    earlier than version 6.7, open-vm-tools logs warning messages.
  + CreateTemporaryFileInGuest/CreateTemporaryDirectoryInGuest returns a file
    path that does not exist.
  + Excessive spikes of the Memory/Workload percentagemetric, in a vRealize
    Operations cluster.
  + open-vm-tools Service running as vmusr crashes on Linux systems which are
    not running on the VMware platform.
- Drop unnecessary patch:
  - false-negative-cloud-init.patch
  - handle-linux-kernel-stat-overflow.patch
  - optional-override-os-name.patch</changelog>
  <changelog author="kallan@suse.com" date="1548763200">- Update vmtoolsd.service to support cloud-init customization by default
  by adding "DefaultDependencies=no" and "Before=cloud-init-local.service"
  to the [Unit] section of vmtoolsd.service (bsc#1121964) .
- Copyright year updated in spec file.</changelog>
  <changelog author="kallan@suse.com" date="1549627200">- Link VGAuthService to libxmlsec1 rather than libxml-security-c in SLE
  products where available. (bsc#1122435)
- Add patches to correct and/or improve handling of certain quiesced snapshot
  failures (bsc#1124397).
  + no_manifest_on_aborted_snapshot.patch
    Don't send a backup manifest when aborting a Linux quiesced snapshot.
  + vmtoolsd_bailout_on_rpc_errors.patch
    Bail out vmtoolsd early when there are RPC errors.
  + send_vmbackup_event_generic_manifest.patch
    Always send VMBACKUP_EVENT_GENERIC_MANIFEST during quiesced snapshots.
  + include_log_h_for_g_info.patch
    Include vmware/tools/log.h to define g_info.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warnings.patch (bsc#1126102).</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1552478400">- Link VGAuthService to libxmlsec1 rather than libxml-security-c for
  SLES 15 and SLES 15 SP1. It requires libxmlsec1 to be available in the
  base.  VGAuthService is already being linked with libxmlsec1 for
  SLES 12 SP4.  (bsc#1122435)</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1553860800">- Update to 10.3.10 (build 12406962) (boo#1130898)
  + Resolved - In certain cases, quiesced snapshots on Linux guests do not
    include backup manifests.
- Drop unnecessary patch:
  - include_log_h_for_g_info.patch
  - no_manifest_on_aborted_snapshot.patch
  - send_vmbackup_event_generic_manifest.patch
  - vmtoolsd_bailout_on_rpc_errors.patch</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1557230400">- Update vmtoolsd.service tools to run after the network service is
  ready. (bsc#1133623)
- Link VGAuthService to libxmlsec1 rather than libxml-security-c in
  SLES 12 SP3. (bsc#1122435)</changelog>
</package>
<package pkgid="18773edd63954a1d0fbce76f2612cc070f909e062d68953ed14045427d5c4a08" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="10.3.10" rel="lp151.2.3.1"/>
  <changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1507291200">- Update to 10.1.15 stable release
  + Tools Hgfs Plugin: refresh Hgfs drives on client start
  + Report version data via guestinfo vars
  + Add entries for MacOS 10.13 (High Sierra) to guest_os_tables.h</changelog>
  <changelog author="mlatimer@suse.com" date="1507896000">- Build deploypackage plugin for SLES11 (bsc#1062837)
  (The VMware provided open-vm-tools-deploypkg is now obsolete.)
- Enable building with ssl capabilities for SLES11.
  +fix_discards_qualifiers_warning.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1513339200">- Update to 10.2.0 (build 7253323) (boo#1073174)
  + Fix memory leak in vmtoolsd.
  + Add SUSE Server for SAP Applications to hostinfoPosix.c
  + Fix crash issue when stopping vmtoolsd(vmuser).
  + Add new GOS definitions (e.g. SLES 15) for virtual hardware version 14.
  + Add /usr/bin/vmware-user symlink to vmware-user-suid-wrapper.
  + Provide vmware-vgauth-smoketest, for VGAUthservice validation.
- Modify udev rules to only adjust timeout on disk devices (bsc#1063320)
  + udev_rules-disk-devs-only.patch
- Due to a hard dependency on glibc 2.12, open-vm-tools 10.2.0 no longer
  builds for SLES11. Remove all SLES11 specific options in spec file.
- Drop unnecessary patches
  - Report-SLES12-SAP-guest-OS-as-SLES12.patch
  - resolutionKMS-wayland.patch
  - fix_discards_qualifiers_warning.patch  (only applicable to SLES11)</changelog>
  <changelog author="mlatimer@suse.com" date="1513857600">- The VMware provided open-vm-tools-deploypkg is now obsoleted.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Stop depending on the meta-package xorg-x11-devel as
  BuildRequires, but use the explicit module names configure is
  looking for: pkgconfig(sm), pkgconfig(xcomposite),
  pkgconfig(xext), pkgconfig(xi), pkgconfig(xinerama),
  pkgconfig(xrandr), pkgconfig(xrender) and pkgconfig(xtst).</changelog>
  <changelog author="mlatimer@suse.com" date="1523016000">- Update to 10.2.5 (build 8068406) (boo#1089181)
  + Compatible with supported versions of VMware vSphere ESXi 5.5 and later,
    VMware Workstation 14.0 and VMware Fusion 10.0.0.
  + Quiesced snapshot: Ability to exclude specific file systems from
    quiesced snapshots on Linux guest operating systems. For more details,
    see [Documentation](https://docs.vmware.com/en/VMware-Tools/index.html)
  + Disable display mode setting: A configuration option is introduced to
    disable normal display mode setting functionality using open-vm-tools.
    For more details, see [KB 53572](https://kb.vmware.com/s/article/53572).
- Drop unnecessary patches
  - udev_rules-disk-devs-only.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1526558400">- Switch from sunrpc to libtirpc to enable building under
  glibc 2.27 in openSUSE Factory.
  (commit 375d4463c68be3a133e4377655b68cc090cd9511)
  + 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533556800">- Update to 10.3.0 (build 8931395)
  + Starting with 10.3.0, open-vm-tools builds with xmlsec1 by default (instead
    of building with xml-security). To revert to the old behavior and build
    with xml-security, use the option '--enable-xmlsecurity' for the
    ./configure command.
  + Add BuildRequires:  libxml2-devel
  + Add BuildRequires:  pkgconfig(xmlsec1) for all openSUSE builds
  + Use --enable-xmlsecurity when building for SLE
- Drop unnecessary patches
  - 100-libtirpc.patch</changelog>
  <changelog author="kallan@suse.com" date="1533902400">-  Remove vgauthd.service from the %pre and %post section in the spec file.
  This allows vmtoolsd.service to enable vgauthd if needed which creates
  the vmtoolsd.service.requires/vgauthd.service symlink. (bsc#1103868)
- Add Requires: libxmlsec1-openssl1 to the spec file.  This is needed when
  using xmlsec1 rather than xml-ssecurity-c.</changelog>
  <changelog author="kallan@suse.com" date="1534334400">- After updating the project to include openSUSE_Leap_15.0 and SLE_15, the
  builds for these two projects fail because of unresolved dependencies.
  Some Factory configuration settings were being used for them.  Need to adjust
  the spec file to not use Factory configuration settings for
  openSUSE_Leap_15.0 and SLE_15.</changelog>
  <changelog author="kallan@suse.com" date="1539345600">- Added Handle Linux kernel /proc FS uint32 type stat overflow when calculating
  (bsc#1110793).
  + handle-linux-kernel-stat-overflow.patch
    On both 32-bit and 64-bit Linux, tools always parses Linux kernel /proc
    FS stats as uint64 values.  For rate stats, current - previous can handle
    uint64 type stat overflow, but not uint32 type.
- Added patch for Optional override for short and long OS names sent from Tools
  (bsc#1047469).
  + optional-override-os-name.patch
    Added support for customers to override the returned long and short OS
    names through the tools config file. If the setting is present, then names
    gathered by hostinfo will be ignored. The user is responsible for setting
    the appropriate names.
- Added patch for Workaround for false negative result when detecting
  cloud-init existance (bsc#1111619)
  + false-negative-cloud-init.patch
    "cloud-init -v" cmd is used to detect if cloud-init is properly configured
    and it works on most linux distros. However in some linux distro like
    Amazon Linux 2, "cloud-init -v" will print result to stderr instead of
    stdout and it makes "forkExecAndWaitCommand" give false negative result.
    1. added a new bool switch in  "ForkExecAndWaitCommand" to choose
    if we should ignore the stderr output when the return code is 0
    2. removed unnecessary reference for "ForkExecAndWaitCommand" in
    linuxDeploymentUtilities.c
    3. trivial change for some formatting</changelog>
  <changelog author="kallan@suse.com" date="1541764800">- Update to 10.3.5 (build 10430147) (boo#1115118)
  + While running a quiesced snapshot of a Linux guest onthe vSphere hosts
    earlier than version 6.7, open-vm-tools logs warning messages.
  + CreateTemporaryFileInGuest/CreateTemporaryDirectoryInGuest returns a file
    path that does not exist.
  + Excessive spikes of the Memory/Workload percentagemetric, in a vRealize
    Operations cluster.
  + open-vm-tools Service running as vmusr crashes on Linux systems which are
    not running on the VMware platform.
- Drop unnecessary patch:
  - false-negative-cloud-init.patch
  - handle-linux-kernel-stat-overflow.patch
  - optional-override-os-name.patch</changelog>
  <changelog author="kallan@suse.com" date="1548763200">- Update vmtoolsd.service to support cloud-init customization by default
  by adding "DefaultDependencies=no" and "Before=cloud-init-local.service"
  to the [Unit] section of vmtoolsd.service (bsc#1121964) .
- Copyright year updated in spec file.</changelog>
  <changelog author="kallan@suse.com" date="1549627200">- Link VGAuthService to libxmlsec1 rather than libxml-security-c in SLE
  products where available. (bsc#1122435)
- Add patches to correct and/or improve handling of certain quiesced snapshot
  failures (bsc#1124397).
  + no_manifest_on_aborted_snapshot.patch
    Don't send a backup manifest when aborting a Linux quiesced snapshot.
  + vmtoolsd_bailout_on_rpc_errors.patch
    Bail out vmtoolsd early when there are RPC errors.
  + send_vmbackup_event_generic_manifest.patch
    Always send VMBACKUP_EVENT_GENERIC_MANIFEST during quiesced snapshots.
  + include_log_h_for_g_info.patch
    Include vmware/tools/log.h to define g_info.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1551182400">- Add gcc9-warnings.patch (bsc#1126102).</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1552478400">- Link VGAuthService to libxmlsec1 rather than libxml-security-c for
  SLES 15 and SLES 15 SP1. It requires libxmlsec1 to be available in the
  base.  VGAuthService is already being linked with libxmlsec1 for
  SLES 12 SP4.  (bsc#1122435)</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1553860800">- Update to 10.3.10 (build 12406962) (boo#1130898)
  + Resolved - In certain cases, quiesced snapshots on Linux guests do not
    include backup manifests.
- Drop unnecessary patch:
  - include_log_h_for_g_info.patch
  - no_manifest_on_aborted_snapshot.patch
  - send_vmbackup_event_generic_manifest.patch
  - vmtoolsd_bailout_on_rpc_errors.patch</changelog>
  <changelog author="kallan &lt;kallan@suse.com&gt;" date="1557230400">- Update vmtoolsd.service tools to run after the network service is
  ready. (bsc#1133623)
- Link VGAuthService to libxmlsec1 rather than libxml-security-c in
  SLES 12 SP3. (bsc#1122435)</changelog>
</package>
<package pkgid="077fc241d70909ad36d851bd49d010c88f925559e183e20901d435b1be04ca6a" name="openSUSE-release-tools" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="d7f28a9cd5e7baac5377b0343f6b160ef34679afeef935bf0b0b5b343ac53ba4" name="openSUSE-release-tools" arch="src">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="75fc8d9746bada62141abc263241ccd80493c026dbcc4d9bf78ee69346eb3bca" name="openSUSE-release-tools-abichecker" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="917711758ad40346be4e665999167941d2a204d1b2412839ff266217b73e275d" name="openSUSE-release-tools-announcer" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="597b7ff40ee9de5578e0bc8e8c8a81a2140610d601bbcba14f4e1f6609e43880" name="openSUSE-release-tools-check-source" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="f9b9305a662b291c04e8c55807ceee7bce8258a2c7be77e51286343ede227f03" name="openSUSE-release-tools-devel" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="4a36a60301910bac3fd494c0fd6b7a23b72bd687ed9a7cb2a57a958692d77450" name="openSUSE-release-tools-leaper" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="4e643d112c3838c4f0d9acf24154e99490dcff01ccc58789355a0a294694ce83" name="openSUSE-release-tools-maintenance" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="8fc0dd31af2c65e48e5194d3537e1a58659fc7ee0446413e7bd1fb574eb48b88" name="openSUSE-release-tools-metrics" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="1bb5e2d4cdbdbacf67d9192da3febfd13fd96470af0049241da118eed7970c0e" name="openSUSE-release-tools-metrics-access" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="e942991a31bf02579b828fbd1329abb524adf4c65f2702094625877527820233" name="openSUSE-release-tools-obs-operator" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="3a2fc88bcec2e5a3f37b0f58427403de27aa6ad02effc87e849b9f12ce887ffe" name="openSUSE-release-tools-origin-manager" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="32412b2cebf8c7cda89bb35f893d640118cef3d2c6254745dd487ea80e00db31" name="openSUSE-release-tools-pkglistgen" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="b1066b345df9bb8fdbc919f307d88339a9840f8d076449ac7112bf64e3bd863e" name="openSUSE-release-tools-repo-checker" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="994eba0feb81ec4d334007a873edc0e79f66c054bc7eeadaf4909b6a6206b4cd" name="openSUSE-release-tools-staging-bot" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="db104a9a3358396338c6bed83c1793c76098b0d40a4f2cc5bf414afdffa5e1ea" name="openexr" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="ac80b7d4b80c75fedf58d54c1507b76f276205c2f67c4a69aa993749f2078f91" name="openexr" arch="src">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="dmueller@suse.de" date="1311768000">- remove explicit libdrm buildrequires</changelog>
  <changelog author="mvyskocil@suse.cz" date="1320062400">- openexr-disable-tests.patch - disable broken tests prevents a build
  in Factory</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="mvyskocil@suse.cz" date="1335268800">- disable the test at all, as running them in OBS seems not to be
  reliable</changelog>
  <changelog author="mvyskocil@suse.cz" date="1343908800">- Update to 1.7.1
  * Updated the .so verison to 7.
  * obsoletes openexr-includes.patch
- require new ilmbase-devel for build
- rename libopenexr-devel to openexr devel to be compatible
  with renamed ilmbase package</changelog>
  <changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
  <changelog author="cfarrell@suse.com" date="1348747201">- license update: BSD-3-Clause
  No GPL licensed files found in the package</changelog>
  <changelog author="mvyskocil@suse.com" date="1365768000">- update to 2.0.0
  * Deep Data support - Pixels can now store a variable-length list of samples.
  The main rationale behind deep images is to enable the storage of multiple
  values at different depths for each pixel. OpenEXR 2.0 supports both
  hard-surface and volumetric representations for Deep Compositing workflows.
  * Multi-part Image Files - With OpenEXR 2.0, files can now contain a number
  of separate, but related, data parts in one file. Access to any part is
  independent of the others, pixels from parts that are not required in the
  current operation don't need to be accessed, resulting in quicker read
  times when accessing only a subset of channels. The multipart interface
  also incorporates support for Stereo images where views are stored in
  separate parts. This makes stereo OpenEXR 2.0 files significantly faster to
  work with than the previous multiview support in OpenEXR.
  * Optimized pixel reading - decoding RGB(A) scanline images has been
  accelerated on SSE processors providing a significant speedup when reading
  both old and new format images, including multipart and multiview files.
  * Namespacing - The library introduces versioned namespaces to avoid
  conflicts between packages compiled with different versions of the library.
- obsoleted
    openexr-suse-docdir.patch (moved in install phase)
    openexr-disable-tests.patch</changelog>
  <changelog author="coolo@suse.com" date="1366459200">- fix library deps</changelog>
  <changelog author="mvyskocil@suse.com" date="1373889600">- update to 2.0.1
  This is a maintenance push that predominantly addresses edge case
  failures in the optimisation code paths by temporarily disabling the
  feature. For more details, please refer to the
  /usr/share/doc/packages/openexr/ChangeLog
- add gpg-offline based verification</changelog>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="b8a8cff586e6b3149ada07a2547cdaf8638a4ffb988873426157c71e480e61cb" name="openexr" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="4351cf264bd787fab718c00577761f333deaf3125163f7583c3d65ed32631517" name="openexr-devel" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="150793e7702e0fd6e0d1f279d781e1ca9b1d8f428cd1e71f02ea2c2c9e41c8ab" name="openexr-devel" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="c7b2375e44a89efa8606cd1df10ead2ffb16e1ba7199fae4ee5f6f102d75cd1f" name="openexr-doc" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="7bcbd41359a9cea3f07efa4d17062ef715d046e81dc9d698acc1d63e15c56980" name="openexr-doc" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp151.4.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1385553600">- update to 2.1.0
  This release includes a refactoring of the optimised read paths for RGBA
  data, optimisations for some of the python bindings to Imath, improvements to
  the cmake build environment as well as additional documentation describing
  deep data in more detail.
- make tests conditional, enable fuzz test and huge test</changelog>
  <changelog author="toganm@opensuse.org" date="1385640000">- add openexr-2.1.0-headers.patch to install
  ImfDeepImageStateAttribute.h header too</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
</package>
<package pkgid="e5aaa7a63aa5f4e93c2d615c086154d94c65038240b1ad0694b677723f8f5e2c" name="openslp" arch="i586">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="6e0988b330ef01071307e409726c4ebb5ca1561fcbec2c3d02a40450c62c7118" name="openslp" arch="src">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="86cf1d5c4df95c07fb90747a37d496c8a10180b40721089a2bb609072d8e4f9e" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="a1362565c15eaf45017f64009064fbfefdbe6618884cf5fc6181f88e3042fc8c" name="openslp-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="f4a4c8fb2090eafcf9f09f62f318b5455b8dde937f127af62b1e5dee0377ba47" name="openslp-devel" arch="i586">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="cd637ffd06ce92b4d8a71960bec3fb1920c55c5224e00983b424c9eb04f322e7" name="openslp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="aad16d173af325704ac07ea69b4165f3321e29f293a72818a8939aabbe2201cb" name="openslp-server" arch="i586">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="f08d32f891c5bda51193f0ffa54543ef2ea3811f6e6983cda59c0108658ea9a4" name="openslp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp151.7.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
</package>
<package pkgid="e5ea80fd18dc102314e7874cda1ae8d50fb384260fc23ff064f1279146b27215" name="openssh" arch="i586">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="5c98528f0eb7cbb112d05febbfcf925c32da9f9232ab7488d2d3d1826d9a6301" name="openssh" arch="src">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="e65f09a04cade9a2688e1b35b78c61334aa8f1182313225657d38eb190e02b56" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="911208be6254b7225f34ec5f2a2a57a85be5746663755318c41f9f3de323d9fe" name="openssh-askpass-gnome" arch="src">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="pcerny@suse.com" date="1319025600">- Update to 5.9p1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="aj@suse.de" date="1332936000">- Add build require on autoconf and automake.</changelog>
  <changelog author="meissner@suse.com" date="1338292800">- use correct tarball url
- update to 6.0p1.</changelog>
  <changelog author="coolo@suse.com" date="1340798400">- the gnome askpass does not require the x11 askpass - especially not
  in the version of openssh (it's at 1.X)</changelog>
  <changelog author="meissner@suse.com" date="1352808000">- Updated to 6.1p1, a bugfix release
  Features:
  * sshd(8): This release turns on pre-auth sandboxing sshd by default for
  new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
  * ssh-keygen(1): Add options to specify starting line number and number of
  lines to process when screening moduli candidates, allowing processing
  of different parts of a candidate moduli file in parallel
  * sshd(8): The Match directive now supports matching on the local (listen)
  address and port upon which the incoming connection was received via
  LocalAddress and LocalPort clauses.
  * sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
  and {Allow,Deny}{Users,Groups}
  * Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978
  * ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8
  * sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as
  an argument to refuse all port-forwarding requests.
  * sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile
  * ssh-keyscan(1): Look for ECDSA keys by default. bz#1971
  * sshd(8): Add "VersionAddendum" to sshd_config to allow server operators
  to append some arbitrary text to the server SSH protocol banner.
  Bugfixes:
  * ssh(1)/sshd(8): Don't spin in accept() in situations of file
  descriptor exhaustion. Instead back off for a while.
  * ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as
  they were removed from the specification. bz#2023,
  * sshd(8): Handle long comments in config files better. bz#2025
  * ssh(1): Delay setting tty_flag so RequestTTY options are correctly
  picked up. bz#1995
  * sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
  on platforms that use login_cap.
  Portable OpenSSH:
  * sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit
  sandbox from the Linux SECCOMP filter sandbox when the latter is
  not available in the kernel.
  * ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to
  retrieve a CNAME SSHFP record.
  * Fix cross-compilation problems related to pkg-config. bz#1996</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
</package>
<package pkgid="b205689a4266b83b0452e8004679c074eb814a1db2df61c38e29596dbe9af25f" name="openssh-askpass-gnome" arch="x86_64">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
</package>
<package pkgid="33b904cc1df686be09d8733623fc55ac5481bd1755a30d1b9a5b720debe22eca" name="openssh-cavs" arch="i586">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="3d6d135a468de913e25ebd681b907a75af53e1f4ffae42fae453a4e5f688dddf" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="65772684e55fb0bf80d2efaa54594f72f2499527c6b1d9cd121261b3b521ad4b" name="openssh-fips" arch="i586">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="3d04ed20b4e3b0aa314a1f303aa655b801f1685cc997ac692400102b0cf11f5f" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="b9e5e010c330568a10fd3dcbd320e93e086aef2146165830b42ace43d9b1a0b0" name="openssh-helpers" arch="i586">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="432c992c22360d605f56e731ed9381bf4a69f3e8128f19ffb6653a190d055fad" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="7.9p1" rel="lp151.4.3.1"/>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542628800">- Revert fix for CVE-2018-15919 which broke GSSAPI authentication
  (bsc#1115654, boo#1116577)
  * drop openssh-7.6p1-bsc_1111776-CVE-2018-15919.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1543233600">- Fix build with openssl &lt; 1.1.0
  * add openssh-openssl-1_0_0-compatibility.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1544529600">- Update the firewall rules in Tumbleweed</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546516800">- Added compatibility with SuSEfirewall2 [bsc#1118044]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547208000">- Security fix: [bsc#1121571, CVE-2018-20685]
  * The scp client allows remote SSH servers to bypass intended
    access restrictions
  * Added patch openssh-7.9p1-CVE-2018-20685.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1547640000">- Security fix:
  * [bsc#1121816, CVE-2019-6109] scp client spoofing via object name
  * [bsc#1121818, CVE-2019-6110] scp client spoofing via stderr
  * [bsc#1121821, CVE-2019-6111] scp client missing received object
    name validation
  * Added patch openssh-7.6p1-scp-name-validator.patch renamed as
    openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331200">- Added SLE conditionals in the spec files:
  * Keep gtk2-devel in openssh-askpass-gnome in SLE
  * Keep krb5-mini-devel in SLE
- Removed obsolete configure options:
  * SSH protocol 1 --with-ssh1
  * Smart card --with-opensc
- Cleaned spec file with spec-cleaner</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548331201">- Allow root login by default [bsc#1118114, bsc#1121196]
  * Added/updated previous patch openssh-7.7p1-allow_root_password_login.patch
  * Mention the change in README.SUSE</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548417600">- Move ssh-ldap* man pages into openssh-helpers [bsc#1051531]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Remove old conditionals</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.9p1-scp-name-validator.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550145600">- Change the askpass wrapper to not use x11 interface:
  * by default we use the -gnome UI (which is gtk3 only, no gnome dep)
  * if desktop is KDE/LxQt we use ksshaskpass</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550145601">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551268800">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.7p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch
  openssh-7.7p1-gssapi_key_exchange.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551355200">- Correctly filter out non-compliant algorithms when in FIPS mode
  (bsc#1126397)
  * A hunk was applied to a wrong place due to a patch fuzz when
    the fips patch was being ported to openssh 7.9p1
- update openssh-7.7p1-fips.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1552392000">- Minor clean-up of the fips patches, modified
  openssh-7.7p1-fips.patch
  openssh-7.7p1-fips_checks.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.7p1-cavstest-kdf.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1559304000">- Fix a crash with GSSAPI key exchange (bsc#1136104)
  * modify openssh-7.7p1-gssapi_key_exchange.patch</changelog>
</package>
<package pkgid="6a494b02aa63a8d11251c7860c8d94d6df17f8d1a0383999284d0dabeaa67b27" name="openssl-1_0_0" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="dc40fcccebdcc5f1ef39fc0d517974d9c9b20797f1791b9d0ab2d0d536f90607" name="openssl-1_0_0" arch="src">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="5be90906bd577ea656584c148c182f51e3752b4289551ef0ba68ab868aa02fae" name="openssl-1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="fed1f286438802e398224245d8e5b7a1800ec9d2c8d542d7c9e63882bfb1aaf0" name="openssl-1_0_0-cavs" arch="i586">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="13cd96cba82617a2eb6c0de08de3d9eaf0263919c190e07532e47819bd73e7cb" name="openssl-1_0_0-cavs" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="cf53f1e6186dfb101c01c2d49f797cb1d641fe9787af03eba4769fb2a1fce68c" name="openssl-1_0_0-doc" arch="noarch">
  <version epoch="0" ver="1.0.2p" rel="lp151.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499688000">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534334400">- Update to 1.0.2p
  - Align with SLE-12-SP4
  OpenSSL Security Advisory [12 June 2018]
  * Reject excessively large primes in DH key generation
    (bsc#1097158, CVE-2018-0732)
  OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * Make EVP_PKEY_asn1_new() a bit stricter about its input
  * Revert blinding in ECDSA sign and instead make problematic addition
    length-invariant. Switch even to fixed-length Montgomery multiplication.
  * Change generating and checking of primes so that the error rate of not
    being prime depends on the intended use based on the size of the input.
  * Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  * Add blinding to ECDSA and DSA signatures to protect against side channel
    attacks
  * When unlocking a pass phrase protected PEM file or PKCS#8 container, we
    now allow empty (zero character) pass phrases.
  * Certificate time validation (X509_cmp_time) enforces stricter
    compliance with RFC 5280. Fractional seconds and timezone offsets
    are no longer allowed.
- add openssl-CVE-2018-0737-fips.patch
- refreshed patches:
  * openssl-1.0.2a-fips-ec.patch
  * openssl-1.0.2a-ipv6-apps.patch
  * openssl-1.0.2i-fips.patch
  * openssl-1.0.2i-new-fips-reqs.patch
  * openssl-1.0.2a-fips-ctor.patch
- drop patches:
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch
  * openssl-CVE-2018-0732.patch</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Don't Require openssl-1_0_0 from the devel package, just Recommend it
- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)</changelog>
  <changelog author="vcizek@suse.com" date="1534420801">- Fix One&amp;Done side-channel attack on RSA (bsc#1104789)
  * add openssl-One_and_Done.patch</changelog>
  <changelog author="vcizek@suse.com" date="1536062400">- correct the error detection in openssl-CVE-2018-0737-fips.patch
  (bsc#1106197)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1539864000">- Fix infinite loop in DSA generation with incorrect parameters
  (bsc#1112209)
  * add 0001-DSA-Check-for-sanity-of-input-parameters.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419200">- OpenSSL Security Advisory [30 October 2018]
  * Timing vulnerability in DSA signature generation
    (bsc#1113652, CVE-2018-0734)
  * And more timing fixes (bsc#1113742)
- Add patches:
  * openssl-CVE-2018-0734.patch
  * 0001-Merge-to-1.0.2-DSA-mod-inverse-fix.patch
  * 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1541419201">- Elliptic curve scalar multiplication timing attack defenses
  * fixes "PortSmash" (bsc#1113534, CVE-2018-5407)
- Add openssl-CVE-2018-5407-PortSmash.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1542888000">- Set TLS version to 0 in msg_callback for record messages to avoid
  confusing applications (bsc#1100078)
  * add openssl-record_msg_callback.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787200">- remove the steam subpackage which was inheritted from openSUSE
  * drop openssl-fix-cpuid_setup.patch
- use %license macro for license</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787201">- The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS
  Implementations (bsc#1117951)
  * https://github.com/openssl/openssl/issues/7739
- add patches
  * 0001-crypto-bn-add-more-fixed-top-routines.patch
  * 0002-rsa-rsa_eay.c-implement-variant-of-Smooth-CRT-RSA.patch
  * 0003-bn-bn_blind.c-use-Montgomery-multiplication-when-pos.patch
  * 0004-bn-bn_lib.c-conceal-even-memmory-access-pattern-in-b.patch
  * 0005-err-err.c-add-err_clear_last_constant_time.patch
  * 0006-rsa-rsa_eay.c-make-RSAerr-call-in-rsa_ossl_private_d.patch
  * 0007-rsa-rsa_pk1.c-remove-memcpy-calls-from-RSA_padding_c.patch
  * 0008-rsa-rsa_oaep.c-remove-memcpy-calls-from-RSA_padding_.patch
  * 0009-rsa-rsa_ssl.c-make-RSA_padding_check_SSLv23-constant.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1551787202">- Fix 0-byte record padding oracle via SSL_shutdown
  (bsc#1127080, CVE-2019-1559)
  * add openssl-CVE-2019-1559.patch</changelog>
</package>
<package pkgid="b07d7941b147449e3d8761cefe1ac79baed00b01c50a0452cf8275dc9e3a4984" name="osc" arch="noarch">
  <version epoch="0" ver="0.165.1" rel="lp151.2.3.1"/>
  <changelog author="marco.strigl@suse.com" date="1547035200">- 0.164.0
  - add support for approved requests (requires OBS 2.10)
  - fix various multibuild problems
  - improved and fixed various help texts
  - check constraints without local checkout
  - check out deleted sources (osc co -D)
  - replace urlgrabber module with own module
  - use progressbar module instead of urlgrabber to draw
    progress bars
  - show buildinfo for alternative projects (--alternative-project)
  - run release job immediately (osc release --no-delay)
  - build results on project level can now be watched (osc prjresults --watch)
- removed python-urlgrabber requieres. (Not used with 0.164.0)
- added recommends for python[2]-progressbar</changelog>
  <changelog author="marco.strigl@suse.com" date="1547640000">- 0.164.1
  - rewrite cpio handling to support python3
  - rewrite ar module to support python3
  - enable fetch module to support python3
  - rework progressbar hanlding (if module is not present)
  - improve os_path_samefile in core.py</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972800">- 0.164.2
  - deleterequest for entire projects needs the --all option as additional protection
  - rewrite packagequery to support python3
  - rewrite oscerr module to support python3
  - rewrite archqeury and debquery to support python3
  - Export vc env vars when running a source service</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972801">- added patches to support python3 until the PR are merged
  upstream (bsc#1125243):
  - 001_helper.patch
  - 002_man_page_building.patch
  - 003_setup.patch
  - 004_babysitter.patch
  - 005_oscssl.patch
  - 006_build.patch
  - 007_core.patch
  - 008_commandline.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972802">- cpio download of needed packages during build is not
  possible, because cpio.py has now a bytes only api and
  the decoding needs to be done in the fetch module instead.
    added: 009_fetch.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972803">- use python3 on Tumbleweed and SLE &gt;= 15</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972804">- rewrite 009_fetch.patch
    some versions of python do not support rb'some_text'
- overwrite python_sitelib on Tumbleweed and SLE &gt;= 15
- swich to python3-rpm on Tumbleweed and SLE &gt;= 15. Otherwise
  python2 will be installed</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972805">- use %bcond_with(out) python3 to simplify spec file
- add and apply patches only in python3 case
- replace shebang in osc-wrapper.py depending on python version</changelog>
  <changelog author="marco.strigl@suse.com" date="1550059200">- osc is now noarch for all
- fixed %license</changelog>
  <changelog author="marco.strigl@suse.com" date="1550145600">- add 010_fix-decoding_in_canonname.patch
  RpmQuery.canonname returns broken filename due to missing
  decoding.</changelog>
  <changelog author="marco.strigl@suse.com" date="1550664000">- fix for bsc#1126055 (osc build -p &lt;dir&gt; fails with TypeError):
  * add 011_repodata.patch
  * add 012_packagequery.patch
  * modified 006_build.patch, 010_fix-decoding_in_canonname.patch
- fix for bsc#1126058 (osc buildinfo -p &lt;dir&gt; fails with TypeError):
  * modified 008_commandline.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1551787200">- modified patch 008_commandline.patch
  * fix broken sorted call on osc my sr when sorting
    the submit requests by reqid. (gh#519)
- modified patch 007_core.patch
  * fix slowdown of rbl with readline(bufsize) function.
    (bsc#1127932)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554638400">- activate tests for osc
- add Buildrequires and Recommends for diffstat
    osc prdiff --diffstat needs it
    The testsuite needs it (Therefore the BuildRequires</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554811200">- added Buildrequires and Requires for python-chardet
  * needed for determining the encoding of objects (Requires)
  * needed also for testing in %check section (BuildRequires)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554811201">- moved Recommends for diffstat to suse specific section.</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1555588800">- 0.165.0
  * full python3 compatibility (bsc#1125243)
    fixes bsc#1131512, bsc#1129889, bsc#1129757
  * removed following patches (now upstream):
    001_helper.patch
    002_man_page_building.patch
    003_setup.patch
    004_babysitter.patch
    005_oscssl.patch
    006_build.patch
    007_core.patch
    008_commandline.patch
    009_fetch.patch
    010_fix-decoding_in_canonname.patch
    011_repodata.patch
    012_packagequery.patch
- spec file modifications:
  * noarch only on non-SUSE distros and newer SUSE Versions &gt; 11
  * disable testsuite on older SUSE Versions (unittest module too old)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1556107200">- simplify "BuildArch:" decission if statements. (Avoid double
  BuildArch lines)
- Fedora29: m2crypto for python3 is named python3-m2crypto now</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1556107201">- osc-0.165.0.tar.gz now contains the correct version (tag 0.165.0)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1558353600">- 0.165.1 (boo#1138165)
  * fix oscssl "urldefrag is not defined error"
  * osc release command now python3 compatible
  * add more decode logic in get_commitlog
  * osc add &lt;dir&gt; in compressed mode now works with python3
  * osc getbinaries now prints the output instead of
    using the quiet mode as a default</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1558440000">- Spec:
  * add Provides: %{use_python}-osc so that other packages
    can require the correct version (either python2-osc or
    python3-osc)</changelog>
</package>
<package pkgid="4a305eb7ae5a6ea45ba6bc3c565d36cbe04c8548b1bd0fb4fc10f1eda0d23f8b" name="osc" arch="src">
  <version epoch="0" ver="0.165.1" rel="lp151.2.3.1"/>
  <changelog author="marco.strigl@suse.com" date="1547035200">- 0.164.0
  - add support for approved requests (requires OBS 2.10)
  - fix various multibuild problems
  - improved and fixed various help texts
  - check constraints without local checkout
  - check out deleted sources (osc co -D)
  - replace urlgrabber module with own module
  - use progressbar module instead of urlgrabber to draw
    progress bars
  - show buildinfo for alternative projects (--alternative-project)
  - run release job immediately (osc release --no-delay)
  - build results on project level can now be watched (osc prjresults --watch)
- removed python-urlgrabber requieres. (Not used with 0.164.0)
- added recommends for python[2]-progressbar</changelog>
  <changelog author="marco.strigl@suse.com" date="1547640000">- 0.164.1
  - rewrite cpio handling to support python3
  - rewrite ar module to support python3
  - enable fetch module to support python3
  - rework progressbar hanlding (if module is not present)
  - improve os_path_samefile in core.py</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972800">- 0.164.2
  - deleterequest for entire projects needs the --all option as additional protection
  - rewrite packagequery to support python3
  - rewrite oscerr module to support python3
  - rewrite archqeury and debquery to support python3
  - Export vc env vars when running a source service</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972801">- added patches to support python3 until the PR are merged
  upstream (bsc#1125243):
  - 001_helper.patch
  - 002_man_page_building.patch
  - 003_setup.patch
  - 004_babysitter.patch
  - 005_oscssl.patch
  - 006_build.patch
  - 007_core.patch
  - 008_commandline.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972802">- cpio download of needed packages during build is not
  possible, because cpio.py has now a bytes only api and
  the decoding needs to be done in the fetch module instead.
    added: 009_fetch.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972803">- use python3 on Tumbleweed and SLE &gt;= 15</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972804">- rewrite 009_fetch.patch
    some versions of python do not support rb'some_text'
- overwrite python_sitelib on Tumbleweed and SLE &gt;= 15
- swich to python3-rpm on Tumbleweed and SLE &gt;= 15. Otherwise
  python2 will be installed</changelog>
  <changelog author="marco.strigl@suse.com" date="1549972805">- use %bcond_with(out) python3 to simplify spec file
- add and apply patches only in python3 case
- replace shebang in osc-wrapper.py depending on python version</changelog>
  <changelog author="marco.strigl@suse.com" date="1550059200">- osc is now noarch for all
- fixed %license</changelog>
  <changelog author="marco.strigl@suse.com" date="1550145600">- add 010_fix-decoding_in_canonname.patch
  RpmQuery.canonname returns broken filename due to missing
  decoding.</changelog>
  <changelog author="marco.strigl@suse.com" date="1550664000">- fix for bsc#1126055 (osc build -p &lt;dir&gt; fails with TypeError):
  * add 011_repodata.patch
  * add 012_packagequery.patch
  * modified 006_build.patch, 010_fix-decoding_in_canonname.patch
- fix for bsc#1126058 (osc buildinfo -p &lt;dir&gt; fails with TypeError):
  * modified 008_commandline.patch</changelog>
  <changelog author="marco.strigl@suse.com" date="1551787200">- modified patch 008_commandline.patch
  * fix broken sorted call on osc my sr when sorting
    the submit requests by reqid. (gh#519)
- modified patch 007_core.patch
  * fix slowdown of rbl with readline(bufsize) function.
    (bsc#1127932)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554638400">- activate tests for osc
- add Buildrequires and Recommends for diffstat
    osc prdiff --diffstat needs it
    The testsuite needs it (Therefore the BuildRequires</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554811200">- added Buildrequires and Requires for python-chardet
  * needed for determining the encoding of objects (Requires)
  * needed also for testing in %check section (BuildRequires)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1554811201">- moved Recommends for diffstat to suse specific section.</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1555588800">- 0.165.0
  * full python3 compatibility (bsc#1125243)
    fixes bsc#1131512, bsc#1129889, bsc#1129757
  * removed following patches (now upstream):
    001_helper.patch
    002_man_page_building.patch
    003_setup.patch
    004_babysitter.patch
    005_oscssl.patch
    006_build.patch
    007_core.patch
    008_commandline.patch
    009_fetch.patch
    010_fix-decoding_in_canonname.patch
    011_repodata.patch
    012_packagequery.patch
- spec file modifications:
  * noarch only on non-SUSE distros and newer SUSE Versions &gt; 11
  * disable testsuite on older SUSE Versions (unittest module too old)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1556107200">- simplify "BuildArch:" decission if statements. (Avoid double
  BuildArch lines)
- Fedora29: m2crypto for python3 is named python3-m2crypto now</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1556107201">- osc-0.165.0.tar.gz now contains the correct version (tag 0.165.0)</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1558353600">- 0.165.1 (boo#1138165)
  * fix oscssl "urldefrag is not defined error"
  * osc release command now python3 compatible
  * add more decode logic in get_commitlog
  * osc add &lt;dir&gt; in compressed mode now works with python3
  * osc getbinaries now prints the output instead of
    using the quiet mode as a default</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1558440000">- Spec:
  * add Provides: %{use_python}-osc so that other packages
    can require the correct version (either python2-osc or
    python3-osc)</changelog>
</package>
<package pkgid="ce0dc7b6cfa3b1289c5cdb74f152388cc343d5a43d6b30760478300af31b4c49" name="osc-plugin-cycle" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="3f59e8641c5d3a1f3d58fb077857949fe41b307f3b72e127d8ffb68dae80da9a" name="osc-plugin-origin" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="6be6e59f7328a2ca6f6cad390d1531335665a93727c781a8e020184166d8317c" name="osc-plugin-staging" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="dd7c419689b7724a92f799e54b1a2b052698ce49d72f44241443cd1c52439a73" name="osc-plugin-vdelreq" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="9d616bc4b776793d2a1d4dc41227128db7eb170754d121455e56a7d3c6b9b588" name="osclib" arch="noarch">
  <version epoch="0" ver="20190603.49a5e95b" rel="lp151.2.3.1"/>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559217600">- Update to version 20190530.5db13774:
  * Remove check_dups plugin</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304000">- Update to version 20190530.f099b690:
  * osc-origin: add missing command descriptions.
  * Use a temporary directory for staging plugin
  * Fix projects import into legaldb</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304001">- Update to version 20190531.9e35b50a:
  * Run one more leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304002">- Update to version 20190531.c354f8c8:
  * Export PYTHONPATH pointing to scripts checkout</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304003">- Update to version 20190531.6f4621dc:
  * Run factory announcer on gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304004">- Update to version 20190531.93127927:
  * Fix support for multiple spec files</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304005">- Update to version 20190531.cf0368b0:
  * Avoid crons triggered by git changes</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304006">- Update to version 20190531.2be3c4ee:
  * Add the tumbleweed URL to kubic config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304007">- Update to version 20190531.dcc007cf:
  * dist/k8s: drop OBS operator origin-manager report cron.
  * systemd: drop OBS operator origin-manager report service/timer.
  * dist/k8s: provide OBS operator origin-manager cron.
  * systemd: provide OBS operator origin-manager cron service and timer.
  * osc-origin: provide cron command to automate lookup management.
  * osc-origin: do not update lookup information if project is locked.
  * osclib/core: provide project_locked().</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304008">- Update to version 20190531.e97e388d:
  * Add daily cleanup of Factory ignore list</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304009">- Update to version 20190531.d9b871ad:
  * Trigger rebuilds from gocd</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304010">- Update to version 20190531.537ad9df:
  * Fix the rebuild trigger config</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304011">- Update to version 20190531.6c5cf2ce:
  * Remove comments from gocd scripts
  * Trying to fix gocd error (on valid yaml)</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304012">- Update to version 20190531.716b6367:
  * Fix filename for repo checker's oscrc</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559304013">- Update to version 20190531.3ecf53c9:
  * Reuse the staging-bot container for manager_42
  * The last leaper service from packagelists</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390400">- Update to version 20190601.882d97cd:
  * Merged special resources into staging-bot
  * Run origin manager reviews on gocd as well</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559390401">- Update to version 20190601.2ec55156:
  * Extend namespace for SLE projects to monitor</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559476800">- Update to version 20190602.850eca98:
  * Fix inner-staging links to use cicount=copy</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563200">- Update to version 20190603.c4a82136:
  * Switch reviewer factory-auto from group to user</changelog>
  <changelog author="opensuse-releaseteam@opensuse.org" date="1559563201">- Update to version 20190603.49a5e95b:
  * Support licensedigger as reviewer for SUSE and openSUSE</changelog>
</package>
<package pkgid="d507141f92f192297ba9e7a693e33225c29132d8e6d738c9d3c31afbe816c523" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20190504" rel="lp151.2.3.1"/>
  <changelog author="fabiano@fidencio.org" date="1527768000">- Update database to version 20180531
  osinfo-db-20180531.tar.xz
- Drop add-opensuse-leap-15-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1528804800">- Update database to version 20180612
  osinfo-db-20180612.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1531483200">- Add official release date for sle15. Drop 'sles' and 'sled' in
  favor of just 'sle' (bsc#1054986)
  add-sle15-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1532088000">- Update database to version 20180720
  osinfo-db-20180720.tar.xz
- Drop add-sle15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1532692800">- bsc#1102101 - osinfo-db: Add support for sle12sp4 to the database
  add-sle12sp4-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1535976000">- Update database to version 20180903
  osinfo-db-20180903.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1538481600">- Update database to version 20180920
  osinfo-db-20180920.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1539172800">- Add support for sle15sp1 (bsc#1086715)
  add-sle15sp1-support.patch</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fabiano@fidencio.org&gt;" date="1539345600">- Update database to version 20181011
  osinfo-db-20181011.tar.xz
- Drop add-caasp-support.patch
- Drop modify-volume-id-for-windows.patch</changelog>
  <changelog author="carnold@suse.com" date="1543579200">- Update database to version 20181116
  osinfo-db-20181116.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1545134400">- Add correct release date for SLE12-SP4
  add-sle12sp4-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1546516800">- Fix volume ID for SLE15-SP1 (bsc#1086715)
  add-sle15sp1-support.patch
  add-opensuse-leap-15.1-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1549281600">- Update database to version 20190120
  osinfo-db-20190120.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1551441600">- Update database to version 20190301
  osinfo-db-20190301.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1552478400">- Add support for Caasp40 media
  add-caasp40-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1554897600">- Update database to version 20190319
  osinfo-db-20190319.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1556020800">- Add support for sle12sp5
  add-sle12sp5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1557403200">- Update database to version 20190504
  osinfo-db-20190504.tar.xz
- Drop add-opensuse-leap-15.1-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1559822400">- Add official release date for sle15sp1
  add-sle15sp1-support.patch</changelog>
</package>
<package pkgid="9e683c27e8c7dbfcc6f9038b61f405ddde01a0d7e532397ce1cf3fd51e84db7d" name="osinfo-db" arch="src">
  <version epoch="0" ver="20190504" rel="lp151.2.3.1"/>
  <changelog author="fabiano@fidencio.org" date="1527768000">- Update database to version 20180531
  osinfo-db-20180531.tar.xz
- Drop add-opensuse-leap-15-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1528804800">- Update database to version 20180612
  osinfo-db-20180612.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1531483200">- Add official release date for sle15. Drop 'sles' and 'sled' in
  favor of just 'sle' (bsc#1054986)
  add-sle15-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1532088000">- Update database to version 20180720
  osinfo-db-20180720.tar.xz
- Drop add-sle15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1532692800">- bsc#1102101 - osinfo-db: Add support for sle12sp4 to the database
  add-sle12sp4-support.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1535976000">- Update database to version 20180903
  osinfo-db-20180903.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1538481600">- Update database to version 20180920
  osinfo-db-20180920.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1539172800">- Add support for sle15sp1 (bsc#1086715)
  add-sle15sp1-support.patch</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fabiano@fidencio.org&gt;" date="1539345600">- Update database to version 20181011
  osinfo-db-20181011.tar.xz
- Drop add-caasp-support.patch
- Drop modify-volume-id-for-windows.patch</changelog>
  <changelog author="carnold@suse.com" date="1543579200">- Update database to version 20181116
  osinfo-db-20181116.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1545134400">- Add correct release date for SLE12-SP4
  add-sle12sp4-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1546516800">- Fix volume ID for SLE15-SP1 (bsc#1086715)
  add-sle15sp1-support.patch
  add-opensuse-leap-15.1-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1549281600">- Update database to version 20190120
  osinfo-db-20190120.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1551441600">- Update database to version 20190301
  osinfo-db-20190301.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1552478400">- Add support for Caasp40 media
  add-caasp40-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1554897600">- Update database to version 20190319
  osinfo-db-20190319.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1556020800">- Add support for sle12sp5
  add-sle12sp5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1557403200">- Update database to version 20190504
  osinfo-db-20190504.tar.xz
- Drop add-opensuse-leap-15.1-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1559822400">- Add official release date for sle15sp1
  add-sle15sp1-support.patch</changelog>
</package>
<package pkgid="cda813ebd56dc9f2055f2be668774df47a2eb22b16969e44c207d89edfd53b2e" name="pam_u2f" arch="src">
  <version epoch="0" ver="1.0.8" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1421150400">- Version 0.0.0
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: More fix to Makefile.am.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * NEWS: Updated NEWS.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Cleaned release target.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: Changed repo variable name.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Indent.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Fixed link in AsciiDoc.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added more asciidoc related packets to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Added more ldconfig.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added check to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Permissions.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Removed libhidapi from Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml, build-aux/travis: Added travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Fixed Makefile.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * configure.ac: Fixed typo in configure.ac.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Updated README.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Removed linebreak at the end of the final
  printout.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo,
  pamu2fcfg/cmdline.h, pamu2fcfg/pamu2fcfg.1.txt,
  pamu2fcfg/pamu2fcfg.c: Added man page.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Improved timout presentation.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Indent.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, Makefile.am, configure.ac, pamu2fcfg/Makefile.am,
  pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Added first version of the registration tool.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Fixed some warnings.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README, pam-u2f.c, pam_u2f.8.txt, util.h: Changed default origin
  and appid to pam://$HOSTNAME.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Typo in README.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, AUTHORS, BLURB, COPYING, Makefile.am, NEWS, README,
  README.adoc, README.md, configure.ac, m4/lib-ld.m4, m4/lib-link.m4,
  m4/lib-prefix.m4, m4/manywarnings.m4, m4/warnings.m4, pam-u2f.c,
  pam_u2f.8.txt, tests/Makefile.am, tests/basic.c, util.c, util.h:
  Added initial content.
  2014-12-10  Alessio Di Mauro &lt;a-dma@users.noreply.github.com&gt;
  * Initial commit</changelog>
  <changelog author="t.gruner@katodev.de" date="1421841600">- Version 0.0.1 (released 2015-01-16)
  - Changed failure mode after authentication error.
  - Added call to setcred.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- Version 1.0.1 (released 2015-06-18)
  - Minor changes to man pages and install hooks.
- Version 1.0.0 (released 2015-06-17)
  - Use XDG_CONFIG_HOME as default for config files.
  - Added manual and interactive mode.
  - Added verbose mode.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Version 1.0.2 (released 2015-10-06)
  - Changes to automake flags.
  - Improve build on OS X.
- Cleanup .spec file
- Add baselib.conf</changelog>
  <changelog author="t.gruner@katodev.de" date="1446811200">- Version 1.0.3 (released 2015-11-02)
  - Bugfix in pamu2fcfg.
  - Minor improvements for verbose mode in pamu2fcfg.</changelog>
  <changelog author="t.gruner@katodev.de" date="1452168000">- Version 1.0.4 (released 2016-01-07)
  - Fixed possible permission escalation when using XDG_CONFIG_HOME.</changelog>
  <changelog author="kbabioch@suse.com" date="1523966400">- Update to version 1.0.5:
  - General bugfixes and quality-of-life improvements.</changelog>
  <changelog author="jengelh@inai.de" date="1524052800">- Update descriptions, trim bias and other-OS stuff.
- Remove extraneous --bindir.</changelog>
  <changelog author="kbabioch@suse.com" date="1524052801">- Update to version 1.0.6:
  - Fix an issue when using syslog as a debug facility.
  - Do not honor cue if no sutable device is found.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559649600">- Version 1.0.8 (released 2019-06-04)
  * Fix insecure debug file handling CVE-2019-12209 (bsc#1135729).
  * Fix debug file descriptor leak CVE-2019-12210 (bsc#1135727).
  * Fix a non-critical buffer oob access.
- Applied spec-cleaner</changelog>
</package>
<package pkgid="f839842798a79c4051a1de5250d3d74c39cda069fceef706ca55fb99b7e0c83d" name="pam_u2f" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1421150400">- Version 0.0.0
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: More fix to Makefile.am.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * NEWS: Updated NEWS.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Cleaned release target.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: Changed repo variable name.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Indent.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Fixed link in AsciiDoc.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added more asciidoc related packets to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Added more ldconfig.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added check to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Permissions.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Removed libhidapi from Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml, build-aux/travis: Added travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Fixed Makefile.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * configure.ac: Fixed typo in configure.ac.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Updated README.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Removed linebreak at the end of the final
  printout.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo,
  pamu2fcfg/cmdline.h, pamu2fcfg/pamu2fcfg.1.txt,
  pamu2fcfg/pamu2fcfg.c: Added man page.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Improved timout presentation.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Indent.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, Makefile.am, configure.ac, pamu2fcfg/Makefile.am,
  pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Added first version of the registration tool.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Fixed some warnings.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README, pam-u2f.c, pam_u2f.8.txt, util.h: Changed default origin
  and appid to pam://$HOSTNAME.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Typo in README.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, AUTHORS, BLURB, COPYING, Makefile.am, NEWS, README,
  README.adoc, README.md, configure.ac, m4/lib-ld.m4, m4/lib-link.m4,
  m4/lib-prefix.m4, m4/manywarnings.m4, m4/warnings.m4, pam-u2f.c,
  pam_u2f.8.txt, tests/Makefile.am, tests/basic.c, util.c, util.h:
  Added initial content.
  2014-12-10  Alessio Di Mauro &lt;a-dma@users.noreply.github.com&gt;
  * Initial commit</changelog>
  <changelog author="t.gruner@katodev.de" date="1421841600">- Version 0.0.1 (released 2015-01-16)
  - Changed failure mode after authentication error.
  - Added call to setcred.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- Version 1.0.1 (released 2015-06-18)
  - Minor changes to man pages and install hooks.
- Version 1.0.0 (released 2015-06-17)
  - Use XDG_CONFIG_HOME as default for config files.
  - Added manual and interactive mode.
  - Added verbose mode.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Version 1.0.2 (released 2015-10-06)
  - Changes to automake flags.
  - Improve build on OS X.
- Cleanup .spec file
- Add baselib.conf</changelog>
  <changelog author="t.gruner@katodev.de" date="1446811200">- Version 1.0.3 (released 2015-11-02)
  - Bugfix in pamu2fcfg.
  - Minor improvements for verbose mode in pamu2fcfg.</changelog>
  <changelog author="t.gruner@katodev.de" date="1452168000">- Version 1.0.4 (released 2016-01-07)
  - Fixed possible permission escalation when using XDG_CONFIG_HOME.</changelog>
  <changelog author="kbabioch@suse.com" date="1523966400">- Update to version 1.0.5:
  - General bugfixes and quality-of-life improvements.</changelog>
  <changelog author="jengelh@inai.de" date="1524052800">- Update descriptions, trim bias and other-OS stuff.
- Remove extraneous --bindir.</changelog>
  <changelog author="kbabioch@suse.com" date="1524052801">- Update to version 1.0.6:
  - Fix an issue when using syslog as a debug facility.
  - Do not honor cue if no sutable device is found.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559649600">- Version 1.0.8 (released 2019-06-04)
  * Fix insecure debug file handling CVE-2019-12209 (bsc#1135729).
  * Fix debug file descriptor leak CVE-2019-12210 (bsc#1135727).
  * Fix a non-critical buffer oob access.
- Applied spec-cleaner</changelog>
</package>
<package pkgid="07d12a942e261eacc04f4388b9900e0f8cacd9e18ab53661349a4fcd049e4bf8" name="perf" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp151.17.3.1"/>
  <changelog author="tonyj@suse.com" date="1522756800">- Add libpython support, regression from SLE12 (bsc#1082197)</changelog>
  <changelog author="tonyj@suse.com" date="1523275200">- More Power9 event updates (bsc#1056686)
  New patch: perf-vendor-events-update-power9-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1528804800">- perf script: Show hw-cache events (bsc#1096885)
  new patch: perf-script-show-hw-cache-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532520000">- Initial checkin for SLE12-SP4.  Rebase off SLE15.
- Add JSON perf event lists for GLP (FATE#325092)
  new patch: perf-vendor-events-add-goldmont-plus-v1-event-file.patch
- Support perf core/uncore event list for Skylake server (FATE#325122)
  new patch: perf-vendor-events-add-core-event-list-for-skylake-server.patch
  new patch: perf-vendor-events-add-skylake-server-uncore-event-list.patch
  new patch: perf-jevents-support-fcmask-and-portmask.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532692800">- Resequence patches into Patch-mainline order
- Rename power event patches for consistency and to avoid exportpatch
  name clashes
  perf-vendor-events-update-power9-events.patch -&gt;
    perf-vendor-events-update-power9-events-9749adc3.patch
  perf-vendor-events-powerpc-update-power9-events.patch -&gt;
    perf-vendor-events-update-power9-events-e795dd42.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532692801">- Merge missing changes from SLE12-SP3 branch
  Thu Jan 18 01:12:14 UTC 2018 - tonyj@suse.com
  - Add necessary power pvr support (bsc#1075525)
    New patch: perf-pmu-events-support-additional-power8-pvr-in-mapfile.patch
    New patch: perf-vendor-events-add-power9-pmu-events.patch
    New patch: perf-vendor-events-add-power9-pvrs-to-mapfile.patch
    New patch: perf-vendor-events-powerpc-remove-suffix-in-mapfile.patch
    New patch: perf-vendor-events-update-power9-events-3c22ba52.patch
    New patch: perf-vendor-events-powerpc-remove-duplicate-events.patch
  Wed Dec  6 19:53:35 UTC 2017 - tonyj@suse.com
  - Add perf scripting support for ppc64le (bsc#1056756)
    New patch: perf-scripting-python-add-ppc64le-to-audit-uname</changelog>
  <changelog author="tonyj@suse.com" date="1533124800">- PMU events are not listed because pvr code is missing for POWER9 (bsc#1075525 )
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-vendor-events-use-more-flexible-pattern-matching-for-cpu-identification-for-mapfile-csv.patch</changelog>
  <changelog author="tonyj@suse.com" date="1533124801">- Support crystall ridge / far / near memory indication in PEBS (FATE#325127)
  New patch: perf-test-add-test-cases-for-new-data-source-encoding.patch
  New patch: perf-tools-add-support-for-printing-new-mem_info-encodings.patch</changelog>
  <changelog author="tonyj@suse.com" date="1535371200">- libebl ppc64 dependancy was inadvertantly dropped, regression from
  "Thu Jun 15 22:27:56 - Add ppc64 requires on libebl (bsc#1040770)".
  Re-add dependancy (bsc#1106048)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1541505600">- Add warning to perf top for too slow CPUs (FATE#325579)
  New patch: perf-evlist-remove-evlist-overwrite.patch
  New patch: perf-evlist-remove-overwrite-parameter-from-perf_evlist__mmap.patch
  New patch: perf-evlist-remove-overwrite-parameter-from-perf_evlist__mmap_ex.patch
  New patch: perf-evlist-remove-stale-mmap-read-for-backward.patch
  New patch: perf-evsel-add-read_counter.patch
  New patch: perf-evsel-add-verbose-output-for-sys_perf_event_open-fallback.patch
  New patch: perf-evsel-expose-the-perf_missing_features-struct.patch
  New patch: perf-hists-browser-add-parameter-to-disable-lost-event-warning.patch
  New patch: perf-mmap-add-new-return-value-logic-for-perf_mmap__read_init.patch
  New patch: perf-mmap-adopt-push-method-from-builtin-record-c.patch
  New patch: perf-mmap-cleanup-perf_mmap__push.patch
  New patch: perf-mmap-discard-legacy-interface-for-mmap-read.patch
  New patch: perf-mmap-discard-prev-in-perf_mmap__read.patch
  New patch: perf-mmap-don-t-discard-prev-in-backward-mode.patch
  New patch: perf-mmap-fix-perf-backward-recording.patch
  New patch: perf-mmap-introduce-perf_mmap__read_done.patch
  New patch: perf-mmap-introduce-perf_mmap__read_event.patch
  New patch: perf-mmap-introduce-perf_mmap__read_init.patch
  New patch: perf-mmap-move-perf_mmap-and-methods-to-separate-mmap-files.patch
  New patch: perf-mmap-recalculate-size-for-overwrite-mode.patch
  New patch: perf-mmap-remove-overwrite-and-check_messup-from-mmap-read.patch
  New patch: perf-mmap-remove-overwrite-from-arguments-list-of-perf_mmap__push.patch
  New patch: perf-record-make-record__mmap_read-generic.patch
  New patch: perf-stat-use-group-read-for-event-groups.patch
  New patch: perf-test-update-mmap-read-functions-for-backward-ring-buffer-test.patch
  New patch: perf-tests-set-evlist-of-test__backward_ring_buffer-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__basic_mmap-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__sw_clock_freq-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__task_exit-to-overwrite.patch
  New patch: perf-tools-add-perf_evsel__read_size-function.patch
  New patch: perf-tools-rename-backward-to-overwrite-in-evlist-mmap-and-record.patch
  New patch: perf-top-add-overwrite-fall-back.patch
  New patch: perf-top-check-per-event-overwrite-term.patch
  New patch: perf-top-check-the-latency-of-perf_top__mmap_read.patch
  New patch: perf-top-fix-window-dimensions-change-handling.patch
  New patch: perf-top-remove-lost-events-checking.patch
  New patch: perf-top-switch-default-mode-to-overwrite-mode.patch
  o
- Incorporate git-fixes for FATE#325579
  New patch: perf-mmap-be-consistent-when-checking-for-an-unmaped-ring-buffer.patch
  New patch: perf-mmap-fix-accessing-unmapped-mmap-in-perf_mmap__read_done.patch
  New patch: perf-top-allow-disabling-the-overwrite-mode.patch
  New patch: perf-top-do-not-use-overwrite-mode-by-default.patch
  New patch: perf-top-fix-annoying-fallback-message-on-older-kernels.patch
  New patch: perf-evsel-only-fall-back-group-read-for-leader.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1542110400">- Add support for ARMv8.x-A statistical profiling extension (FATE#325865)
- Add support for ARMv8.1-PMU: ARMv8.1 PMU Extensions (FATE#325861)
  New patch: perf-arm64-Generate-system-call-table-from-asm-unist.patch
  New patch: perf-arm-spe-Fix-uninitialized-record-error-variable.patch
  New patch: perf-auxtrace-arm-Fixing-uninitialised-variable.patch
  New patch: perf-events-parse-Remove-some-needless-local-variabl.patch
  New patch: perf-events-parse-Rename-parse_events_parse-argument.patch
  New patch: perf-events-parse-Rename-parsing-state-struct-to-cle.patch
  New patch: perf-events-parse-Use-just-one-parse-events-state-st.patch
  New patch: perf-help-fix-a-bug-during-strstart-conversion.patch
  New patch: perf-list-Add-metric-groups-to-perf-list.patch
  New patch: perf-pmu-Add-check-for-valid-cpuid-in-perf_pmu__find.patch
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-pmu-Pass-pmu-as-a-parameter-to-get_cpuid_str.patch
  New patch: perf-pmu-Unbreak-perf-record-for-arm-arm64-with-even.patch
  New patch: perf-probe-arm64-Fix-symbol-fixup-issues-due-to-ELF-.patch
  New patch: perf-stat-Factor-out-generic-metric-printing.patch
  New patch: perf-stat-Only-auto-merge-events-that-are-PMU-aliase.patch
  New patch: perf-stat-Support-JSON-metrics-in-perf-stat.patch
  New patch: perf-symbols-Fix-plt-entry-calculation-for-ARM-and-A.patch
  New patch: perf-tests-Run-dwarf-unwind-test-on-arm32.patch
  New patch: perf-tools-Add-ARM-Statistical-Profiling-Extensions-.patch
  New patch: perf-tools-arm64-Add-libdw-DWARF-post-unwind-support.patch
  New patch: perf-tools-arm64-Add-support-for-get_cpuid_str-funct.patch
  New patch: perf-vendor-events-arm64-Enable-JSON-events-for-eMAG.patch
  New patch: perf-vendor-events-arm64-Update-ThunderX2-implementa.patch
  New patch: tools-include-Adopt-strstarts-from-the-kernel.patch
- Incorporate git-fixes for FATE#325865/FATE#325861
  New patch: perf-arm64-fix-generate-system-call-table-failed-with-tmp-mounted-with-noexec.patch
  New patch: perf-arm64-fix-include-path-for-asm-generic-unistd-h.patch missing
  New patch: perf-symbols-set-plt-entry-header-sizes-properly-on-sparc.patch missing
- Add Hi1620 Perf hardware enablement (FATE#326417)
  New patch: perf-jevents-Make-build-fail-on-JSON-parse-error.patch
  New patch: perf-vendor-events-aarch64-Add-JSON-metrics-for-ARM-.patch
  New patch: perf-vendor-events-Add-support-for-arch-standard-eve.patch
  New patch: perf-vendor-events-Add-support-for-pmu-events-vendor.patch
  New patch: perf-vendor-events-arm64-Add-armv8-recommended.json.patch
  New patch: perf-vendor-events-arm64-add-HiSilicon-hip08-JSON-fi.patch
  New patch: perf-vendor-events-arm64-Add-ThunderX2-implementatio.patch
  New patch: perf-vendor-events-arm64-Enable-JSON-events-for-Thun.patch
  New patch: perf-vendor-events-arm64-fixup-A53-to-use-recommende.patch
  New patch: perf-vendor-events-arm64-Fixup-ThunderX2-to-use-reco.patch
  New patch: perf-vendor-events-arm64-Relocate-Cortex-A53-JSONs-t.patch
  New patch: perf-vendor-events-arm64-Relocate-ThunderX2-JSON-to-.patch
  New patch: perf-vendor-events-Drop-incomplete-multiple-mapfile-.patch
  New patch: perf-vendor-events-Drop-support-for-unused-topic-dir.patch
  New patch: perf-vendor-events-Fix-error-code-in-json_events.patch
  New patch: perf-vendor-events-Support-metric_group-and-no-event.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1547121600">- Enable python3.  Remove all uses of python2 (bsc#1082197)
  New patch: perf-script-python-allocate-memory-only-if-handler-exists.patch
  New patch: perf-script-python-refactor-creation-of-perf-sample-dict.patch
  New patch: perf-script-python-add-sample_read-to-dict.patch
  New patch: perf-script-python-add-perf_sample-dict-to-tracepoint-handlers.patch
  New patch: perf-python-make-twatch-py-work-with-both-python2-and-python3.patch
  New patch: perf-tools-add-python-3-support.patch
  New patch: perf-tools-fix-python-extension-build-for-gcc-8.patch
  New patch: perf-scripts-python-add-python-3-support-to-util-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-sched-migration-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-schedgui-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-eventclass-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-core-py.patch
  New patch: perf-python-remove-mcet-and-fcf-protection-when-building-with-clang.patch
  New patch: perf-python-use-wno-redundant-decls-to-build-with-python-python3.patch
  New patch: perf-python-make-clang_has_option-work-on-python-3.patch
  New patch: update-tests-attr.py-to-support-python3.patch
  New patch: remove-shebang-from-util-setup.py.patch
  New patch: remove-shebang-from-tests-attr.py.patch
  New patch: remove-shebang-from-scripts-python.patch
  New patch: add-trace_context-extension-module-to-sys-modules.patch
  New patch: use-pybytes-for-attr-in-trace-event-python.patch
  New patch: port-netdev-times-script-to-python3.patch
  New patch: port-check-perf-trace-script-to-python3.patch
  New patch: port-event_analyzing_sample-script-to-python3.patch
  New patch: port-failed-syscalls-by-pid-script-to-python3.patch
  New patch: port-futex-contention-script-to-python3.patch
  New patch: port-net_dropmonitor-script-to-python3.patch
  New patch: port-sctop-script-to-python3.patch
  New patch: port-stackcollapse-script-to-python3.patch
  New patch: port-stat-cpi-script-to-python3.patch
  New patch: port-syscall-counts-by-pid-script-to-python3.patch
  New patch: port-python-syscall-counts-script-to-python3.patch
  New patch: port-sql-scripts-to-python3.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1547467200">- Add support for VTune (FATE#326324)
  New patch:  perf-record-enable-arbitrary-event-names-thru-name-modifier.patch
  New patch:  perf-report-extend-raw-dump-d-out-with-switch-out-event-type.patch
  New patch:  perf-script-add-missing-output-fields-in-a-hint.patch
  New patch:  perf-script-add-support-to-display-sample-misc-field.patch
  New patch:  perf-script-allow-adding-and-removing-fields.patch
  New patch:  perf-script-extend-misc-field-decoding-with-switch-out-event-type.patch
  New patch:  perf-stat-enable-1ms-interval-for-printing-event-counters-values.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1549022400">- Uprobes: Support for SDT events with reference counter
  (FATE#326782, bsc#1115391)
  New patch: perf-probe-support-sdt-markers-having-reference-counter-semaphore.patch</changelog>
  <changelog author="tonyj@suse.com" date="1550059200">- Add POWER mem/c2c support (FATE#326866, bsc#1124370)
  New patch: perf-mem-c2c-fix-perf_mem_events-to-support-powerpc.patch
  New patch: perf-mem-allow-all-record-report-options.patch
  New patch: perf-mem-document-a-missing-option.patch
  New patch: perf-mem-document-incorrect-and-missing-options.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553256000">- Fix crash when processing recorded stat data
  New patch: perf-script-fix-crash-when-processing-recorded-stat-data.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553256001">- Refresh patches for previous Python3 (Thu Jan 10 23:23:28 UTC 2019)
  submission now that all patches are upstream
  Delete patch: port-netdev-times-script-to-python3.patch
  Delete patch: port-check-perf-trace-script-to-python3.patch
  Delete patch: port-event_analyzing_sample-script-to-python3.patch
  Delete patch: port-failed-syscalls-by-pid-script-to-python3.patch
  Delete patch: port-futex-contention-script-to-python3.patch
  Delete patch: port-net_dropmonitor-script-to-python3.patch
  Delete patch: port-sctop-script-to-python3.patch
  Delete patch: port-stackcollapse-script-to-python3.patch
  Delete patch: port-stat-cpi-script-to-python3.patch
  Delete patch: port-syscall-counts-by-pid-script-to-python3.patch
  Delete patch: port-python-syscall-counts-script-to-python3.patch
  Delete patch: remove-shebang-from-scripts-python.patch
  Delete patch: remove-shebang-from-tests-attr.py.patch
  Delete patch: remove-shebang-from-util-setup.py.patch
  Delete patch: update-tests-attr.py-to-support-python3.patch
  Delete patch: use-pybytes-for-attr-in-trace-event-python.patch
  New patch: perf-script-python-add-printdate-function-to-sql-exporters.patch
  New patch: perf-script-python-add-python3-support-to-export-to-postgresql-py.patch
  New patch: perf-script-python-add-python3-support-to-exported-sql-viewer-py.patch
  New patch: perf-script-python-add-python3-support-to-failed-syscalls-by-pid-py.patch
  New patch: perf-script-python-add-python3-support-to-futex-contention-py.patch  New patch: perf-script-python-add-python3-support-to-net_dropmonitor-py.patch
  New patch: perf-script-python-add-python3-support-to-netdev-times-py.patch
  New patch: perf-script-python-add-python3-support-to-sctop-py.patch
  New patch: perf-script-python-add-python3-support-to-stackcollapse-py.patch
  New patch: perf-script-python-add-python3-support-to-stat-cpi-py.patch
  New patch: perf-script-python-add-python3-support-to-syscall-counts-by-pid-py.patch
  New patch: perf-script-python-add-python3-support-to-syscall-counts-py.patch
  New patch: perf-script-python-add-python3-support-to-tests-attr-py.patch
  New patch: perf-script-python-add-trace_context-extension-module-to-sys-modules.patch
  New patch: perf-script-python-remove-explicit-shebang-from-python-scripts.patch
  New patch: perf-script-python-remove-explicit-shebang-from-setup-py.patch
  New patch: perf-script-python-remove-explicit-shebang-from-tests-attr-c.patch
  New patch: perf-script-python-remove-mixed-indentation.patch
  New patch: perf-script-python-add-python3-support-to-check-perf-trace-py.patch
  New patch: perf-script-python-add-python3-support-to-event_analyzing_sample-py.patch
  New patch: perf-script-python-use-pybytes-for-attr-in-trace-event-python.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553342400">- Handle empty node 0 topology for c2c (bsc#1127191)
  New patch: perf-header-encapsulate-read-and-swap.patch
  New patch: perf-util-add-const-modifier-to-buf-in-writen-function.patch
  New patch: perf-header-fail-on-write_padded-error.patch
  New patch: perf-header-revamp-do_write.patch
  New patch: perf-header-add-struct-feat_fd-for-write.patch
  New patch: perf-header-remove-unused-cpu_nr-field-from-struct-cpu_topo.patch
  New patch: perf-header-fix-wrong-node-write-in-numa_topology-feature.patch
  New patch: perf-tools-add-cpu_topology-object.patch
  New patch: perf-tools-add-numa_topology-object.patch
  New patch: perf-c2c-fix-c2c-report-for-empty-numa-node.patch
  New patch: perf-tools-handle-topology-headers-with-no-cpu.patch
  New patch: perf-c2c-fix-spelling-mistakes-in-browser-help-text.patch
  New patch: perf-c2c-report-fix-crash-for-empty-browser.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553774400">- Correct missing static qualifier in previous backport of
  perf-mmap-be-consistent-when-checking-for-an-unmaped-ring-buffer.patch
- Git-fixes:
  New patch: perf-python-do-not-force-closing-original-perf-descriptor-in-evlist-get_pollfd.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1563883200">- perf script: Fix crash printing mixed tracepoint/other events (bsc#1142104)
  New patch: perf-script-fix-crash-with-printing-mixed-trace-point-and-other-events.patch</changelog>
</package>
<package pkgid="5014123a1ddaf51258b861be87950107a9f297ba82f4b99df86504c54d575827" name="perf" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp151.17.3.1"/>
  <changelog author="tonyj@suse.com" date="1522756800">- Add libpython support, regression from SLE12 (bsc#1082197)</changelog>
  <changelog author="tonyj@suse.com" date="1523275200">- More Power9 event updates (bsc#1056686)
  New patch: perf-vendor-events-update-power9-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1528804800">- perf script: Show hw-cache events (bsc#1096885)
  new patch: perf-script-show-hw-cache-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532520000">- Initial checkin for SLE12-SP4.  Rebase off SLE15.
- Add JSON perf event lists for GLP (FATE#325092)
  new patch: perf-vendor-events-add-goldmont-plus-v1-event-file.patch
- Support perf core/uncore event list for Skylake server (FATE#325122)
  new patch: perf-vendor-events-add-core-event-list-for-skylake-server.patch
  new patch: perf-vendor-events-add-skylake-server-uncore-event-list.patch
  new patch: perf-jevents-support-fcmask-and-portmask.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532692800">- Resequence patches into Patch-mainline order
- Rename power event patches for consistency and to avoid exportpatch
  name clashes
  perf-vendor-events-update-power9-events.patch -&gt;
    perf-vendor-events-update-power9-events-9749adc3.patch
  perf-vendor-events-powerpc-update-power9-events.patch -&gt;
    perf-vendor-events-update-power9-events-e795dd42.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532692801">- Merge missing changes from SLE12-SP3 branch
  Thu Jan 18 01:12:14 UTC 2018 - tonyj@suse.com
  - Add necessary power pvr support (bsc#1075525)
    New patch: perf-pmu-events-support-additional-power8-pvr-in-mapfile.patch
    New patch: perf-vendor-events-add-power9-pmu-events.patch
    New patch: perf-vendor-events-add-power9-pvrs-to-mapfile.patch
    New patch: perf-vendor-events-powerpc-remove-suffix-in-mapfile.patch
    New patch: perf-vendor-events-update-power9-events-3c22ba52.patch
    New patch: perf-vendor-events-powerpc-remove-duplicate-events.patch
  Wed Dec  6 19:53:35 UTC 2017 - tonyj@suse.com
  - Add perf scripting support for ppc64le (bsc#1056756)
    New patch: perf-scripting-python-add-ppc64le-to-audit-uname</changelog>
  <changelog author="tonyj@suse.com" date="1533124800">- PMU events are not listed because pvr code is missing for POWER9 (bsc#1075525 )
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-vendor-events-use-more-flexible-pattern-matching-for-cpu-identification-for-mapfile-csv.patch</changelog>
  <changelog author="tonyj@suse.com" date="1533124801">- Support crystall ridge / far / near memory indication in PEBS (FATE#325127)
  New patch: perf-test-add-test-cases-for-new-data-source-encoding.patch
  New patch: perf-tools-add-support-for-printing-new-mem_info-encodings.patch</changelog>
  <changelog author="tonyj@suse.com" date="1535371200">- libebl ppc64 dependancy was inadvertantly dropped, regression from
  "Thu Jun 15 22:27:56 - Add ppc64 requires on libebl (bsc#1040770)".
  Re-add dependancy (bsc#1106048)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1541505600">- Add warning to perf top for too slow CPUs (FATE#325579)
  New patch: perf-evlist-remove-evlist-overwrite.patch
  New patch: perf-evlist-remove-overwrite-parameter-from-perf_evlist__mmap.patch
  New patch: perf-evlist-remove-overwrite-parameter-from-perf_evlist__mmap_ex.patch
  New patch: perf-evlist-remove-stale-mmap-read-for-backward.patch
  New patch: perf-evsel-add-read_counter.patch
  New patch: perf-evsel-add-verbose-output-for-sys_perf_event_open-fallback.patch
  New patch: perf-evsel-expose-the-perf_missing_features-struct.patch
  New patch: perf-hists-browser-add-parameter-to-disable-lost-event-warning.patch
  New patch: perf-mmap-add-new-return-value-logic-for-perf_mmap__read_init.patch
  New patch: perf-mmap-adopt-push-method-from-builtin-record-c.patch
  New patch: perf-mmap-cleanup-perf_mmap__push.patch
  New patch: perf-mmap-discard-legacy-interface-for-mmap-read.patch
  New patch: perf-mmap-discard-prev-in-perf_mmap__read.patch
  New patch: perf-mmap-don-t-discard-prev-in-backward-mode.patch
  New patch: perf-mmap-fix-perf-backward-recording.patch
  New patch: perf-mmap-introduce-perf_mmap__read_done.patch
  New patch: perf-mmap-introduce-perf_mmap__read_event.patch
  New patch: perf-mmap-introduce-perf_mmap__read_init.patch
  New patch: perf-mmap-move-perf_mmap-and-methods-to-separate-mmap-files.patch
  New patch: perf-mmap-recalculate-size-for-overwrite-mode.patch
  New patch: perf-mmap-remove-overwrite-and-check_messup-from-mmap-read.patch
  New patch: perf-mmap-remove-overwrite-from-arguments-list-of-perf_mmap__push.patch
  New patch: perf-record-make-record__mmap_read-generic.patch
  New patch: perf-stat-use-group-read-for-event-groups.patch
  New patch: perf-test-update-mmap-read-functions-for-backward-ring-buffer-test.patch
  New patch: perf-tests-set-evlist-of-test__backward_ring_buffer-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__basic_mmap-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__sw_clock_freq-to-overwrite.patch
  New patch: perf-tests-set-evlist-of-test__task_exit-to-overwrite.patch
  New patch: perf-tools-add-perf_evsel__read_size-function.patch
  New patch: perf-tools-rename-backward-to-overwrite-in-evlist-mmap-and-record.patch
  New patch: perf-top-add-overwrite-fall-back.patch
  New patch: perf-top-check-per-event-overwrite-term.patch
  New patch: perf-top-check-the-latency-of-perf_top__mmap_read.patch
  New patch: perf-top-fix-window-dimensions-change-handling.patch
  New patch: perf-top-remove-lost-events-checking.patch
  New patch: perf-top-switch-default-mode-to-overwrite-mode.patch
  o
- Incorporate git-fixes for FATE#325579
  New patch: perf-mmap-be-consistent-when-checking-for-an-unmaped-ring-buffer.patch
  New patch: perf-mmap-fix-accessing-unmapped-mmap-in-perf_mmap__read_done.patch
  New patch: perf-top-allow-disabling-the-overwrite-mode.patch
  New patch: perf-top-do-not-use-overwrite-mode-by-default.patch
  New patch: perf-top-fix-annoying-fallback-message-on-older-kernels.patch
  New patch: perf-evsel-only-fall-back-group-read-for-leader.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1542110400">- Add support for ARMv8.x-A statistical profiling extension (FATE#325865)
- Add support for ARMv8.1-PMU: ARMv8.1 PMU Extensions (FATE#325861)
  New patch: perf-arm64-Generate-system-call-table-from-asm-unist.patch
  New patch: perf-arm-spe-Fix-uninitialized-record-error-variable.patch
  New patch: perf-auxtrace-arm-Fixing-uninitialised-variable.patch
  New patch: perf-events-parse-Remove-some-needless-local-variabl.patch
  New patch: perf-events-parse-Rename-parse_events_parse-argument.patch
  New patch: perf-events-parse-Rename-parsing-state-struct-to-cle.patch
  New patch: perf-events-parse-Use-just-one-parse-events-state-st.patch
  New patch: perf-help-fix-a-bug-during-strstart-conversion.patch
  New patch: perf-list-Add-metric-groups-to-perf-list.patch
  New patch: perf-pmu-Add-check-for-valid-cpuid-in-perf_pmu__find.patch
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-pmu-Pass-pmu-as-a-parameter-to-get_cpuid_str.patch
  New patch: perf-pmu-Unbreak-perf-record-for-arm-arm64-with-even.patch
  New patch: perf-probe-arm64-Fix-symbol-fixup-issues-due-to-ELF-.patch
  New patch: perf-stat-Factor-out-generic-metric-printing.patch
  New patch: perf-stat-Only-auto-merge-events-that-are-PMU-aliase.patch
  New patch: perf-stat-Support-JSON-metrics-in-perf-stat.patch
  New patch: perf-symbols-Fix-plt-entry-calculation-for-ARM-and-A.patch
  New patch: perf-tests-Run-dwarf-unwind-test-on-arm32.patch
  New patch: perf-tools-Add-ARM-Statistical-Profiling-Extensions-.patch
  New patch: perf-tools-arm64-Add-libdw-DWARF-post-unwind-support.patch
  New patch: perf-tools-arm64-Add-support-for-get_cpuid_str-funct.patch
  New patch: perf-vendor-events-arm64-Enable-JSON-events-for-eMAG.patch
  New patch: perf-vendor-events-arm64-Update-ThunderX2-implementa.patch
  New patch: tools-include-Adopt-strstarts-from-the-kernel.patch
- Incorporate git-fixes for FATE#325865/FATE#325861
  New patch: perf-arm64-fix-generate-system-call-table-failed-with-tmp-mounted-with-noexec.patch
  New patch: perf-arm64-fix-include-path-for-asm-generic-unistd-h.patch missing
  New patch: perf-symbols-set-plt-entry-header-sizes-properly-on-sparc.patch missing
- Add Hi1620 Perf hardware enablement (FATE#326417)
  New patch: perf-jevents-Make-build-fail-on-JSON-parse-error.patch
  New patch: perf-vendor-events-aarch64-Add-JSON-metrics-for-ARM-.patch
  New patch: perf-vendor-events-Add-support-for-arch-standard-eve.patch
  New patch: perf-vendor-events-Add-support-for-pmu-events-vendor.patch
  New patch: perf-vendor-events-arm64-Add-armv8-recommended.json.patch
  New patch: perf-vendor-events-arm64-add-HiSilicon-hip08-JSON-fi.patch
  New patch: perf-vendor-events-arm64-Add-ThunderX2-implementatio.patch
  New patch: perf-vendor-events-arm64-Enable-JSON-events-for-Thun.patch
  New patch: perf-vendor-events-arm64-fixup-A53-to-use-recommende.patch
  New patch: perf-vendor-events-arm64-Fixup-ThunderX2-to-use-reco.patch
  New patch: perf-vendor-events-arm64-Relocate-Cortex-A53-JSONs-t.patch
  New patch: perf-vendor-events-arm64-Relocate-ThunderX2-JSON-to-.patch
  New patch: perf-vendor-events-Drop-incomplete-multiple-mapfile-.patch
  New patch: perf-vendor-events-Drop-support-for-unused-topic-dir.patch
  New patch: perf-vendor-events-Fix-error-code-in-json_events.patch
  New patch: perf-vendor-events-Support-metric_group-and-no-event.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1547121600">- Enable python3.  Remove all uses of python2 (bsc#1082197)
  New patch: perf-script-python-allocate-memory-only-if-handler-exists.patch
  New patch: perf-script-python-refactor-creation-of-perf-sample-dict.patch
  New patch: perf-script-python-add-sample_read-to-dict.patch
  New patch: perf-script-python-add-perf_sample-dict-to-tracepoint-handlers.patch
  New patch: perf-python-make-twatch-py-work-with-both-python2-and-python3.patch
  New patch: perf-tools-add-python-3-support.patch
  New patch: perf-tools-fix-python-extension-build-for-gcc-8.patch
  New patch: perf-scripts-python-add-python-3-support-to-util-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-sched-migration-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-schedgui-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-eventclass-py.patch
  New patch: perf-scripts-python-add-python-3-support-to-core-py.patch
  New patch: perf-python-remove-mcet-and-fcf-protection-when-building-with-clang.patch
  New patch: perf-python-use-wno-redundant-decls-to-build-with-python-python3.patch
  New patch: perf-python-make-clang_has_option-work-on-python-3.patch
  New patch: update-tests-attr.py-to-support-python3.patch
  New patch: remove-shebang-from-util-setup.py.patch
  New patch: remove-shebang-from-tests-attr.py.patch
  New patch: remove-shebang-from-scripts-python.patch
  New patch: add-trace_context-extension-module-to-sys-modules.patch
  New patch: use-pybytes-for-attr-in-trace-event-python.patch
  New patch: port-netdev-times-script-to-python3.patch
  New patch: port-check-perf-trace-script-to-python3.patch
  New patch: port-event_analyzing_sample-script-to-python3.patch
  New patch: port-failed-syscalls-by-pid-script-to-python3.patch
  New patch: port-futex-contention-script-to-python3.patch
  New patch: port-net_dropmonitor-script-to-python3.patch
  New patch: port-sctop-script-to-python3.patch
  New patch: port-stackcollapse-script-to-python3.patch
  New patch: port-stat-cpi-script-to-python3.patch
  New patch: port-syscall-counts-by-pid-script-to-python3.patch
  New patch: port-python-syscall-counts-script-to-python3.patch
  New patch: port-sql-scripts-to-python3.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1547467200">- Add support for VTune (FATE#326324)
  New patch:  perf-record-enable-arbitrary-event-names-thru-name-modifier.patch
  New patch:  perf-report-extend-raw-dump-d-out-with-switch-out-event-type.patch
  New patch:  perf-script-add-missing-output-fields-in-a-hint.patch
  New patch:  perf-script-add-support-to-display-sample-misc-field.patch
  New patch:  perf-script-allow-adding-and-removing-fields.patch
  New patch:  perf-script-extend-misc-field-decoding-with-switch-out-event-type.patch
  New patch:  perf-stat-enable-1ms-interval-for-printing-event-counters-values.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1549022400">- Uprobes: Support for SDT events with reference counter
  (FATE#326782, bsc#1115391)
  New patch: perf-probe-support-sdt-markers-having-reference-counter-semaphore.patch</changelog>
  <changelog author="tonyj@suse.com" date="1550059200">- Add POWER mem/c2c support (FATE#326866, bsc#1124370)
  New patch: perf-mem-c2c-fix-perf_mem_events-to-support-powerpc.patch
  New patch: perf-mem-allow-all-record-report-options.patch
  New patch: perf-mem-document-a-missing-option.patch
  New patch: perf-mem-document-incorrect-and-missing-options.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553256000">- Fix crash when processing recorded stat data
  New patch: perf-script-fix-crash-when-processing-recorded-stat-data.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553256001">- Refresh patches for previous Python3 (Thu Jan 10 23:23:28 UTC 2019)
  submission now that all patches are upstream
  Delete patch: port-netdev-times-script-to-python3.patch
  Delete patch: port-check-perf-trace-script-to-python3.patch
  Delete patch: port-event_analyzing_sample-script-to-python3.patch
  Delete patch: port-failed-syscalls-by-pid-script-to-python3.patch
  Delete patch: port-futex-contention-script-to-python3.patch
  Delete patch: port-net_dropmonitor-script-to-python3.patch
  Delete patch: port-sctop-script-to-python3.patch
  Delete patch: port-stackcollapse-script-to-python3.patch
  Delete patch: port-stat-cpi-script-to-python3.patch
  Delete patch: port-syscall-counts-by-pid-script-to-python3.patch
  Delete patch: port-python-syscall-counts-script-to-python3.patch
  Delete patch: remove-shebang-from-scripts-python.patch
  Delete patch: remove-shebang-from-tests-attr.py.patch
  Delete patch: remove-shebang-from-util-setup.py.patch
  Delete patch: update-tests-attr.py-to-support-python3.patch
  Delete patch: use-pybytes-for-attr-in-trace-event-python.patch
  New patch: perf-script-python-add-printdate-function-to-sql-exporters.patch
  New patch: perf-script-python-add-python3-support-to-export-to-postgresql-py.patch
  New patch: perf-script-python-add-python3-support-to-exported-sql-viewer-py.patch
  New patch: perf-script-python-add-python3-support-to-failed-syscalls-by-pid-py.patch
  New patch: perf-script-python-add-python3-support-to-futex-contention-py.patch  New patch: perf-script-python-add-python3-support-to-net_dropmonitor-py.patch
  New patch: perf-script-python-add-python3-support-to-netdev-times-py.patch
  New patch: perf-script-python-add-python3-support-to-sctop-py.patch
  New patch: perf-script-python-add-python3-support-to-stackcollapse-py.patch
  New patch: perf-script-python-add-python3-support-to-stat-cpi-py.patch
  New patch: perf-script-python-add-python3-support-to-syscall-counts-by-pid-py.patch
  New patch: perf-script-python-add-python3-support-to-syscall-counts-py.patch
  New patch: perf-script-python-add-python3-support-to-tests-attr-py.patch
  New patch: perf-script-python-add-trace_context-extension-module-to-sys-modules.patch
  New patch: perf-script-python-remove-explicit-shebang-from-python-scripts.patch
  New patch: perf-script-python-remove-explicit-shebang-from-setup-py.patch
  New patch: perf-script-python-remove-explicit-shebang-from-tests-attr-c.patch
  New patch: perf-script-python-remove-mixed-indentation.patch
  New patch: perf-script-python-add-python3-support-to-check-perf-trace-py.patch
  New patch: perf-script-python-add-python3-support-to-event_analyzing_sample-py.patch
  New patch: perf-script-python-use-pybytes-for-attr-in-trace-event-python.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553342400">- Handle empty node 0 topology for c2c (bsc#1127191)
  New patch: perf-header-encapsulate-read-and-swap.patch
  New patch: perf-util-add-const-modifier-to-buf-in-writen-function.patch
  New patch: perf-header-fail-on-write_padded-error.patch
  New patch: perf-header-revamp-do_write.patch
  New patch: perf-header-add-struct-feat_fd-for-write.patch
  New patch: perf-header-remove-unused-cpu_nr-field-from-struct-cpu_topo.patch
  New patch: perf-header-fix-wrong-node-write-in-numa_topology-feature.patch
  New patch: perf-tools-add-cpu_topology-object.patch
  New patch: perf-tools-add-numa_topology-object.patch
  New patch: perf-c2c-fix-c2c-report-for-empty-numa-node.patch
  New patch: perf-tools-handle-topology-headers-with-no-cpu.patch
  New patch: perf-c2c-fix-spelling-mistakes-in-browser-help-text.patch
  New patch: perf-c2c-report-fix-crash-for-empty-browser.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1553774400">- Correct missing static qualifier in previous backport of
  perf-mmap-be-consistent-when-checking-for-an-unmaped-ring-buffer.patch
- Git-fixes:
  New patch: perf-python-do-not-force-closing-original-perf-descriptor-in-evlist-get_pollfd.patch</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1563883200">- perf script: Fix crash printing mixed tracepoint/other events (bsc#1142104)
  New patch: perf-script-fix-crash-with-printing-mixed-trace-point-and-other-events.patch</changelog>
</package>
<package pkgid="88cd8bf737dbd5e52576bf01520c72e4b9ab213d566bff304972897e84910360" name="perl-Bootloader" arch="i586">
  <version epoch="0" ver="0.924" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.com" date="1454932800">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112000">- merge gh#openSUSE/perl-bootloader#117
- work without /etc/default/grub_installdevice (bsc#1079321,
  bsc#994322)
- removed unused function</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112001">- update git2log script
- 0.922</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/perl-bootloader#120
- create temporary files in /tmp (bsc#1108777)
- 0.923</changelog>
  <changelog author="jreidinger@suse.cz" date="1559822400">- merge gh#openSUSE/perl-bootloader#121
- Fix secureboot on aarch64 (boo#1136601)
- [RFC] Fix secureboot on aarch64 (boo#1136601)
- 0.924</changelog>
</package>
<package pkgid="6011336b14ee55f969a350d8e6edd994d51514d34b26b12cc97bac52f6fb329e" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.924" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.com" date="1454932800">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112000">- merge gh#openSUSE/perl-bootloader#117
- work without /etc/default/grub_installdevice (bsc#1079321,
  bsc#994322)
- removed unused function</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112001">- update git2log script
- 0.922</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/perl-bootloader#120
- create temporary files in /tmp (bsc#1108777)
- 0.923</changelog>
  <changelog author="jreidinger@suse.cz" date="1559822400">- merge gh#openSUSE/perl-bootloader#121
- Fix secureboot on aarch64 (boo#1136601)
- [RFC] Fix secureboot on aarch64 (boo#1136601)
- 0.924</changelog>
</package>
<package pkgid="3f72b563ca13844566c147fa9d56cc4e322d0a0991a0955fc9b2c54494222df0" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.924" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.com" date="1454932800">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112000">- merge gh#openSUSE/perl-bootloader#117
- work without /etc/default/grub_installdevice (bsc#1079321,
  bsc#994322)
- removed unused function</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112001">- update git2log script
- 0.922</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/perl-bootloader#120
- create temporary files in /tmp (bsc#1108777)
- 0.923</changelog>
  <changelog author="jreidinger@suse.cz" date="1559822400">- merge gh#openSUSE/perl-bootloader#121
- Fix secureboot on aarch64 (boo#1136601)
- [RFC] Fix secureboot on aarch64 (boo#1136601)
- 0.924</changelog>
</package>
<package pkgid="a07602f37f51d4ef7bfe541733c93a6f0f4d4744849b98208687326069cc039f" name="perl-Bootloader-YAML" arch="i586">
  <version epoch="0" ver="0.924" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.com" date="1454932800">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112000">- merge gh#openSUSE/perl-bootloader#117
- work without /etc/default/grub_installdevice (bsc#1079321,
  bsc#994322)
- removed unused function</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112001">- update git2log script
- 0.922</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/perl-bootloader#120
- create temporary files in /tmp (bsc#1108777)
- 0.923</changelog>
  <changelog author="jreidinger@suse.cz" date="1559822400">- merge gh#openSUSE/perl-bootloader#121
- Fix secureboot on aarch64 (boo#1136601)
- [RFC] Fix secureboot on aarch64 (boo#1136601)
- 0.924</changelog>
</package>
<package pkgid="d87b6073b776e706197f9119f7b8c2e3a3016e71ce50f81898f6911baadd8573" name="perl-Bootloader-YAML" arch="x86_64">
  <version epoch="0" ver="0.924" rel="lp151.2.3.1"/>
  <changelog author="snwint@suse.com" date="1454932800">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112000">- merge gh#openSUSE/perl-bootloader#117
- work without /etc/default/grub_installdevice (bsc#1079321,
  bsc#994322)
- removed unused function</changelog>
  <changelog author="wfeldt@opensuse.org" date="1535112001">- update git2log script
- 0.922</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/perl-bootloader#120
- create temporary files in /tmp (bsc#1108777)
- 0.923</changelog>
  <changelog author="jreidinger@suse.cz" date="1559822400">- merge gh#openSUSE/perl-bootloader#121
- Fix secureboot on aarch64 (boo#1136601)
- [RFC] Fix secureboot on aarch64 (boo#1136601)
- 0.924</changelog>
</package>
<package pkgid="845ffe3d1c97b6b4ef38e75c7947a45fdc3370514361f6cbb665d8e38b14c0be" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="3fdd64bbc5a0f12c20aef78da6d7e1fae24253b157d9e7951e45a0eabb7e38ce" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp151.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="f40b74c0de8ca5ae9fca3b36733caa997ebe357707fc961f893474916faf0524" name="perl-PerlMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="0a80da7ed7551a6580976fbae15a250711b3d9e033bb43c471e0c2620769a6cc" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="3c3cb3d86916d106dd10034d974a30565ec0b83782e6f18257b09d6e2d68732d" name="perl-PerlMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="c3ece1bb9c7c42ecd86ca458ead77f14811a5f4a7143b73dc5336ff2b5e4891e" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp151.7.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="9bd73ba29604f9983ab0cb12e69d423ac078be607817f9374d4ffa8afba8a129" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="5c19fdb6c582338121be059f779597bdf09d1c54d1de48022002b1ea5be4b50d" name="perl-Tk" arch="i586">
  <version epoch="0" ver="804.034" rel="lp151.3.3.1"/>
  <changelog author="cfarrell@novell.com" date="1300190400">- license update: (GPL+ or Artistic) and zlib
  More correct statement of the package license in Fedora
  compatible syntax as per http://is.gd/HtnxI9 and
  http://en.opensuse.org/openSUSE:Accepted_licences</changelog>
  <changelog author="vcizek@suse.com" date="1319198400">- update to 804.030
  Many bugfixes (see Changes)
  New features
    BalloonInfo for HList
    https://rt.cpan.org/Ticket/Display.html?id=55887
    Perl/Tk is now available at github.
    Improved "all widgets at a glance" demo.</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- builds also against libpng16
  * libpng16.patch</changelog>
  <changelog author="coolo@suse.com" date="1373284800">- updated to 804.031
  Fixes
  The CopSTASH_set fix did not work in 804.030_501 because of a
  missing file in the tarball. Now fixed.
  Tk::MakeDepend parses gcc's inc search list now and does not rely
  anymore on $Config{usrinc}. This helps when include files are
  partially in "multiarch" subdirectories (e.g. in Debian/sid) or when
  $Config{usrinc} is incorrect (e.g. in ActivePerl+gcc builds).
  RT #85407 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708624
  Helping Debian's build process by skipping the quilt state directory
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708635
  Improving build process for ActivePerl+gcc (RT #74036); see also
  README-ActiveState.txt.
  Use pkg-config for determining libpng cflags and libs.
  Tk-804.030_501 release (2013-05-18)
  - ---------------------
  Fixes
  Should compile again with older perls: SvNV_nomg is not available with
  perls older than 5.13.2, and CopSTASH_set(..., NULL) is not possible
  with threaded 5.16.x and older.
  Tk-804.030_500 release (2013-05-18)
  - ---------------------
  Incompatible changes
  The Tk::Text::Contents() method does not return an extra newline
  anymore (RT #83124). The version number of Tk::Text was incremented
  to 4.029 and may be used to detect the change.
  Fixes
  RT #78824: fixed compilation under threaded bleadperl (5.17.x)
  Fix for internal magic handling, needed for perl 5.17.2 and newer.
  Fixed myConfig issue with perl 5.17.x.
  SvUPGRADE() is no longer an expression since perl 5.17.7.
  Off-by-one error in Tk::Table::clear method (problem spotted by David
  Overeem).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1405771200">- Update to 804.032
  * RT# 88210: fix compilation for perl 5.19.0+ ("undef bool")
  * RT# 90077: floating number issue with -textvariable variables
  * RT# 89621: avoid segfaults during global destruction (by Gisle Aas)
  * RT# 87016: compatibility for libpng 1.6.x
  * RT# 86988: use cflags/libs information from pkg-config zlib
  * RT# 89261: split Tk/ColorEditor.pm into three .pm files
  * RT# 71718: fix compilation issue with 64bit Strawberry Perl (Tk_Cursor)
  * Fail gracefully if no font could be allocated
- Tk-804.032-tkglue.diff: no segfaults if Tk::MainWindow::Create was
  called without args
- Tk-804.032-freetype.diff: look also for /usr/include/freetype2/freetype.h
- Tk-804.029-lib64.diff, Tk-804.029-xorg.diff, Tk-804.030-libpng16.diff:
  remove upstreamed patches</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- Update to version 804.033:
  + New t/pod.t test (github pull request #16).
- Drop Tk-804.032-tkglue.diff and Tk-804.032-freetype.diff: Fixed
  upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1441022401">- Remove provides on quite wrong header file in devel subpkg pointing
  to perl 5.8.8 dir
- Use inline parameter for sed, well this should be redone more
- Cleanup bit with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- update to 804.034:
  Fixes
  Fix aborts on OS X Sierra, introduced by latest clang/llvm
  strcpy/strncpy (RT #121631, github pull request #28 by Mark Aufflick)
  No special xOKp handling in Perl_Value (RT #121528)
  Add freetype2 path on MacOSX / XQuartz to inc search paths
  (github pull request #21 by Christoph Lamprecht)
  Fix Tk::NoteBook's FindMenu (Martin Jacobs)
  Documentation
  Add Tk::getSaveFile Pod file (see also
  github pull request #19)
  Fix documentation about scrollbars
  (github pull request #18 by asb-cpan)
  Add openSUSE instructions to README.linux
  (github pull request #25 by Tux)
  Add documentation notes about "make -j"
  Tests
  New test for Tk::NoteBook.
  t/Trace.t is using now Test::More
  travis-ci improvements
  Introduce CI testing on appveyor</changelog>
  <changelog author="coolo@suse.com" date="1506254401">- use system jpeg to avoid failures with builtin version</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557316800">- Tk::Photo importer fails on some XPM files (RT#128103, bsc#1134134)
  * Added patches:
    perl-Tk-fix-for-RT-128103-XPM-loading-problem.patch
    perl-Tk-XPM-loading-improve-error-message-for-short-files.patch
    perl-Tk-XPM-images-may-appear-in-the-colors-section.patch</changelog>
</package>
<package pkgid="87e667a4d6bf02a4523872f45964bce9abf06f2f84872f4126ab574159ff7cd5" name="perl-Tk" arch="src">
  <version epoch="0" ver="804.034" rel="lp151.3.3.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="aj@suse.de" date="1260792000">- Fix build to not run disabled tests.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="dmueller@suse.de" date="1270728000">- require the right version of perl</changelog>
  <changelog author="anicka@suse.cz" date="1271764800">- port utf fix for perl 5.12 from development version</changelog>
  <changelog author="anicka@suse.cz" date="1279540800">- update to 804.029
  * bugfixes, test fixes
- removed CVE-2006-4484 and per5.12 patches (fixed in upstream)</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1290168000">- newer Xorg define different include guards</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="cfarrell@novell.com" date="1300190400">- license update: (GPL+ or Artistic) and zlib
  More correct statement of the package license in Fedora
  compatible syntax as per http://is.gd/HtnxI9 and
  http://en.opensuse.org/openSUSE:Accepted_licences</changelog>
  <changelog author="vcizek@suse.com" date="1319198400">- update to 804.030
  Many bugfixes (see Changes)
  New features
    BalloonInfo for HList
    https://rt.cpan.org/Ticket/Display.html?id=55887
    Perl/Tk is now available at github.
    Improved "all widgets at a glance" demo.</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- builds also against libpng16
  * libpng16.patch</changelog>
  <changelog author="coolo@suse.com" date="1373284800">- updated to 804.031
  Fixes
  The CopSTASH_set fix did not work in 804.030_501 because of a
  missing file in the tarball. Now fixed.
  Tk::MakeDepend parses gcc's inc search list now and does not rely
  anymore on $Config{usrinc}. This helps when include files are
  partially in "multiarch" subdirectories (e.g. in Debian/sid) or when
  $Config{usrinc} is incorrect (e.g. in ActivePerl+gcc builds).
  RT #85407 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708624
  Helping Debian's build process by skipping the quilt state directory
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708635
  Improving build process for ActivePerl+gcc (RT #74036); see also
  README-ActiveState.txt.
  Use pkg-config for determining libpng cflags and libs.
  Tk-804.030_501 release (2013-05-18)
  - ---------------------
  Fixes
  Should compile again with older perls: SvNV_nomg is not available with
  perls older than 5.13.2, and CopSTASH_set(..., NULL) is not possible
  with threaded 5.16.x and older.
  Tk-804.030_500 release (2013-05-18)
  - ---------------------
  Incompatible changes
  The Tk::Text::Contents() method does not return an extra newline
  anymore (RT #83124). The version number of Tk::Text was incremented
  to 4.029 and may be used to detect the change.
  Fixes
  RT #78824: fixed compilation under threaded bleadperl (5.17.x)
  Fix for internal magic handling, needed for perl 5.17.2 and newer.
  Fixed myConfig issue with perl 5.17.x.
  SvUPGRADE() is no longer an expression since perl 5.17.7.
  Off-by-one error in Tk::Table::clear method (problem spotted by David
  Overeem).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1405771200">- Update to 804.032
  * RT# 88210: fix compilation for perl 5.19.0+ ("undef bool")
  * RT# 90077: floating number issue with -textvariable variables
  * RT# 89621: avoid segfaults during global destruction (by Gisle Aas)
  * RT# 87016: compatibility for libpng 1.6.x
  * RT# 86988: use cflags/libs information from pkg-config zlib
  * RT# 89261: split Tk/ColorEditor.pm into three .pm files
  * RT# 71718: fix compilation issue with 64bit Strawberry Perl (Tk_Cursor)
  * Fail gracefully if no font could be allocated
- Tk-804.032-tkglue.diff: no segfaults if Tk::MainWindow::Create was
  called without args
- Tk-804.032-freetype.diff: look also for /usr/include/freetype2/freetype.h
- Tk-804.029-lib64.diff, Tk-804.029-xorg.diff, Tk-804.030-libpng16.diff:
  remove upstreamed patches</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- Update to version 804.033:
  + New t/pod.t test (github pull request #16).
- Drop Tk-804.032-tkglue.diff and Tk-804.032-freetype.diff: Fixed
  upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1441022401">- Remove provides on quite wrong header file in devel subpkg pointing
  to perl 5.8.8 dir
- Use inline parameter for sed, well this should be redone more
- Cleanup bit with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- update to 804.034:
  Fixes
  Fix aborts on OS X Sierra, introduced by latest clang/llvm
  strcpy/strncpy (RT #121631, github pull request #28 by Mark Aufflick)
  No special xOKp handling in Perl_Value (RT #121528)
  Add freetype2 path on MacOSX / XQuartz to inc search paths
  (github pull request #21 by Christoph Lamprecht)
  Fix Tk::NoteBook's FindMenu (Martin Jacobs)
  Documentation
  Add Tk::getSaveFile Pod file (see also
  github pull request #19)
  Fix documentation about scrollbars
  (github pull request #18 by asb-cpan)
  Add openSUSE instructions to README.linux
  (github pull request #25 by Tux)
  Add documentation notes about "make -j"
  Tests
  New test for Tk::NoteBook.
  t/Trace.t is using now Test::More
  travis-ci improvements
  Introduce CI testing on appveyor</changelog>
  <changelog author="coolo@suse.com" date="1506254401">- use system jpeg to avoid failures with builtin version</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557316800">- Tk::Photo importer fails on some XPM files (RT#128103, bsc#1134134)
  * Added patches:
    perl-Tk-fix-for-RT-128103-XPM-loading-problem.patch
    perl-Tk-XPM-loading-improve-error-message-for-short-files.patch
    perl-Tk-XPM-images-may-appear-in-the-colors-section.patch</changelog>
</package>
<package pkgid="a3c6937a3dda3db1f32398c1cf4f725a2c93e0bac323ba2d8909053e8601a8e3" name="perl-Tk" arch="x86_64">
  <version epoch="0" ver="804.034" rel="lp151.3.3.1"/>
  <changelog author="cfarrell@novell.com" date="1300190400">- license update: (GPL+ or Artistic) and zlib
  More correct statement of the package license in Fedora
  compatible syntax as per http://is.gd/HtnxI9 and
  http://en.opensuse.org/openSUSE:Accepted_licences</changelog>
  <changelog author="vcizek@suse.com" date="1319198400">- update to 804.030
  Many bugfixes (see Changes)
  New features
    BalloonInfo for HList
    https://rt.cpan.org/Ticket/Display.html?id=55887
    Perl/Tk is now available at github.
    Improved "all widgets at a glance" demo.</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- builds also against libpng16
  * libpng16.patch</changelog>
  <changelog author="coolo@suse.com" date="1373284800">- updated to 804.031
  Fixes
  The CopSTASH_set fix did not work in 804.030_501 because of a
  missing file in the tarball. Now fixed.
  Tk::MakeDepend parses gcc's inc search list now and does not rely
  anymore on $Config{usrinc}. This helps when include files are
  partially in "multiarch" subdirectories (e.g. in Debian/sid) or when
  $Config{usrinc} is incorrect (e.g. in ActivePerl+gcc builds).
  RT #85407 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708624
  Helping Debian's build process by skipping the quilt state directory
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708635
  Improving build process for ActivePerl+gcc (RT #74036); see also
  README-ActiveState.txt.
  Use pkg-config for determining libpng cflags and libs.
  Tk-804.030_501 release (2013-05-18)
  - ---------------------
  Fixes
  Should compile again with older perls: SvNV_nomg is not available with
  perls older than 5.13.2, and CopSTASH_set(..., NULL) is not possible
  with threaded 5.16.x and older.
  Tk-804.030_500 release (2013-05-18)
  - ---------------------
  Incompatible changes
  The Tk::Text::Contents() method does not return an extra newline
  anymore (RT #83124). The version number of Tk::Text was incremented
  to 4.029 and may be used to detect the change.
  Fixes
  RT #78824: fixed compilation under threaded bleadperl (5.17.x)
  Fix for internal magic handling, needed for perl 5.17.2 and newer.
  Fixed myConfig issue with perl 5.17.x.
  SvUPGRADE() is no longer an expression since perl 5.17.7.
  Off-by-one error in Tk::Table::clear method (problem spotted by David
  Overeem).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1405771200">- Update to 804.032
  * RT# 88210: fix compilation for perl 5.19.0+ ("undef bool")
  * RT# 90077: floating number issue with -textvariable variables
  * RT# 89621: avoid segfaults during global destruction (by Gisle Aas)
  * RT# 87016: compatibility for libpng 1.6.x
  * RT# 86988: use cflags/libs information from pkg-config zlib
  * RT# 89261: split Tk/ColorEditor.pm into three .pm files
  * RT# 71718: fix compilation issue with 64bit Strawberry Perl (Tk_Cursor)
  * Fail gracefully if no font could be allocated
- Tk-804.032-tkglue.diff: no segfaults if Tk::MainWindow::Create was
  called without args
- Tk-804.032-freetype.diff: look also for /usr/include/freetype2/freetype.h
- Tk-804.029-lib64.diff, Tk-804.029-xorg.diff, Tk-804.030-libpng16.diff:
  remove upstreamed patches</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- Update to version 804.033:
  + New t/pod.t test (github pull request #16).
- Drop Tk-804.032-tkglue.diff and Tk-804.032-freetype.diff: Fixed
  upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1441022401">- Remove provides on quite wrong header file in devel subpkg pointing
  to perl 5.8.8 dir
- Use inline parameter for sed, well this should be redone more
- Cleanup bit with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- update to 804.034:
  Fixes
  Fix aborts on OS X Sierra, introduced by latest clang/llvm
  strcpy/strncpy (RT #121631, github pull request #28 by Mark Aufflick)
  No special xOKp handling in Perl_Value (RT #121528)
  Add freetype2 path on MacOSX / XQuartz to inc search paths
  (github pull request #21 by Christoph Lamprecht)
  Fix Tk::NoteBook's FindMenu (Martin Jacobs)
  Documentation
  Add Tk::getSaveFile Pod file (see also
  github pull request #19)
  Fix documentation about scrollbars
  (github pull request #18 by asb-cpan)
  Add openSUSE instructions to README.linux
  (github pull request #25 by Tux)
  Add documentation notes about "make -j"
  Tests
  New test for Tk::NoteBook.
  t/Trace.t is using now Test::More
  travis-ci improvements
  Introduce CI testing on appveyor</changelog>
  <changelog author="coolo@suse.com" date="1506254401">- use system jpeg to avoid failures with builtin version</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557316800">- Tk::Photo importer fails on some XPM files (RT#128103, bsc#1134134)
  * Added patches:
    perl-Tk-fix-for-RT-128103-XPM-loading-problem.patch
    perl-Tk-XPM-loading-improve-error-message-for-short-files.patch
    perl-Tk-XPM-images-may-appear-in-the-colors-section.patch</changelog>
</package>
<package pkgid="69c5cd8d3070c5198ba65c1f7987b435af7c523ac19c92a48971d145521950b1" name="perl-Tk-devel" arch="i586">
  <version epoch="0" ver="804.034" rel="lp151.3.3.1"/>
  <changelog author="cfarrell@novell.com" date="1300190400">- license update: (GPL+ or Artistic) and zlib
  More correct statement of the package license in Fedora
  compatible syntax as per http://is.gd/HtnxI9 and
  http://en.opensuse.org/openSUSE:Accepted_licences</changelog>
  <changelog author="vcizek@suse.com" date="1319198400">- update to 804.030
  Many bugfixes (see Changes)
  New features
    BalloonInfo for HList
    https://rt.cpan.org/Ticket/Display.html?id=55887
    Perl/Tk is now available at github.
    Improved "all widgets at a glance" demo.</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- builds also against libpng16
  * libpng16.patch</changelog>
  <changelog author="coolo@suse.com" date="1373284800">- updated to 804.031
  Fixes
  The CopSTASH_set fix did not work in 804.030_501 because of a
  missing file in the tarball. Now fixed.
  Tk::MakeDepend parses gcc's inc search list now and does not rely
  anymore on $Config{usrinc}. This helps when include files are
  partially in "multiarch" subdirectories (e.g. in Debian/sid) or when
  $Config{usrinc} is incorrect (e.g. in ActivePerl+gcc builds).
  RT #85407 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708624
  Helping Debian's build process by skipping the quilt state directory
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708635
  Improving build process for ActivePerl+gcc (RT #74036); see also
  README-ActiveState.txt.
  Use pkg-config for determining libpng cflags and libs.
  Tk-804.030_501 release (2013-05-18)
  - ---------------------
  Fixes
  Should compile again with older perls: SvNV_nomg is not available with
  perls older than 5.13.2, and CopSTASH_set(..., NULL) is not possible
  with threaded 5.16.x and older.
  Tk-804.030_500 release (2013-05-18)
  - ---------------------
  Incompatible changes
  The Tk::Text::Contents() method does not return an extra newline
  anymore (RT #83124). The version number of Tk::Text was incremented
  to 4.029 and may be used to detect the change.
  Fixes
  RT #78824: fixed compilation under threaded bleadperl (5.17.x)
  Fix for internal magic handling, needed for perl 5.17.2 and newer.
  Fixed myConfig issue with perl 5.17.x.
  SvUPGRADE() is no longer an expression since perl 5.17.7.
  Off-by-one error in Tk::Table::clear method (problem spotted by David
  Overeem).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1405771200">- Update to 804.032
  * RT# 88210: fix compilation for perl 5.19.0+ ("undef bool")
  * RT# 90077: floating number issue with -textvariable variables
  * RT# 89621: avoid segfaults during global destruction (by Gisle Aas)
  * RT# 87016: compatibility for libpng 1.6.x
  * RT# 86988: use cflags/libs information from pkg-config zlib
  * RT# 89261: split Tk/ColorEditor.pm into three .pm files
  * RT# 71718: fix compilation issue with 64bit Strawberry Perl (Tk_Cursor)
  * Fail gracefully if no font could be allocated
- Tk-804.032-tkglue.diff: no segfaults if Tk::MainWindow::Create was
  called without args
- Tk-804.032-freetype.diff: look also for /usr/include/freetype2/freetype.h
- Tk-804.029-lib64.diff, Tk-804.029-xorg.diff, Tk-804.030-libpng16.diff:
  remove upstreamed patches</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- Update to version 804.033:
  + New t/pod.t test (github pull request #16).
- Drop Tk-804.032-tkglue.diff and Tk-804.032-freetype.diff: Fixed
  upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1441022401">- Remove provides on quite wrong header file in devel subpkg pointing
  to perl 5.8.8 dir
- Use inline parameter for sed, well this should be redone more
- Cleanup bit with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- update to 804.034:
  Fixes
  Fix aborts on OS X Sierra, introduced by latest clang/llvm
  strcpy/strncpy (RT #121631, github pull request #28 by Mark Aufflick)
  No special xOKp handling in Perl_Value (RT #121528)
  Add freetype2 path on MacOSX / XQuartz to inc search paths
  (github pull request #21 by Christoph Lamprecht)
  Fix Tk::NoteBook's FindMenu (Martin Jacobs)
  Documentation
  Add Tk::getSaveFile Pod file (see also
  github pull request #19)
  Fix documentation about scrollbars
  (github pull request #18 by asb-cpan)
  Add openSUSE instructions to README.linux
  (github pull request #25 by Tux)
  Add documentation notes about "make -j"
  Tests
  New test for Tk::NoteBook.
  t/Trace.t is using now Test::More
  travis-ci improvements
  Introduce CI testing on appveyor</changelog>
  <changelog author="coolo@suse.com" date="1506254401">- use system jpeg to avoid failures with builtin version</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557316800">- Tk::Photo importer fails on some XPM files (RT#128103, bsc#1134134)
  * Added patches:
    perl-Tk-fix-for-RT-128103-XPM-loading-problem.patch
    perl-Tk-XPM-loading-improve-error-message-for-short-files.patch
    perl-Tk-XPM-images-may-appear-in-the-colors-section.patch</changelog>
</package>
<package pkgid="6c9a50e70e41dbfcc81d4fc0bcabc1ec52994e3b1d4a56e07e4eed668845c347" name="perl-Tk-devel" arch="x86_64">
  <version epoch="0" ver="804.034" rel="lp151.3.3.1"/>
  <changelog author="cfarrell@novell.com" date="1300190400">- license update: (GPL+ or Artistic) and zlib
  More correct statement of the package license in Fedora
  compatible syntax as per http://is.gd/HtnxI9 and
  http://en.opensuse.org/openSUSE:Accepted_licences</changelog>
  <changelog author="vcizek@suse.com" date="1319198400">- update to 804.030
  Many bugfixes (see Changes)
  New features
    BalloonInfo for HList
    https://rt.cpan.org/Ticket/Display.html?id=55887
    Perl/Tk is now available at github.
    Improved "all widgets at a glance" demo.</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- builds also against libpng16
  * libpng16.patch</changelog>
  <changelog author="coolo@suse.com" date="1373284800">- updated to 804.031
  Fixes
  The CopSTASH_set fix did not work in 804.030_501 because of a
  missing file in the tarball. Now fixed.
  Tk::MakeDepend parses gcc's inc search list now and does not rely
  anymore on $Config{usrinc}. This helps when include files are
  partially in "multiarch" subdirectories (e.g. in Debian/sid) or when
  $Config{usrinc} is incorrect (e.g. in ActivePerl+gcc builds).
  RT #85407 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708624
  Helping Debian's build process by skipping the quilt state directory
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=708635
  Improving build process for ActivePerl+gcc (RT #74036); see also
  README-ActiveState.txt.
  Use pkg-config for determining libpng cflags and libs.
  Tk-804.030_501 release (2013-05-18)
  - ---------------------
  Fixes
  Should compile again with older perls: SvNV_nomg is not available with
  perls older than 5.13.2, and CopSTASH_set(..., NULL) is not possible
  with threaded 5.16.x and older.
  Tk-804.030_500 release (2013-05-18)
  - ---------------------
  Incompatible changes
  The Tk::Text::Contents() method does not return an extra newline
  anymore (RT #83124). The version number of Tk::Text was incremented
  to 4.029 and may be used to detect the change.
  Fixes
  RT #78824: fixed compilation under threaded bleadperl (5.17.x)
  Fix for internal magic handling, needed for perl 5.17.2 and newer.
  Fixed myConfig issue with perl 5.17.x.
  SvUPGRADE() is no longer an expression since perl 5.17.7.
  Off-by-one error in Tk::Table::clear method (problem spotted by David
  Overeem).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1405771200">- Update to 804.032
  * RT# 88210: fix compilation for perl 5.19.0+ ("undef bool")
  * RT# 90077: floating number issue with -textvariable variables
  * RT# 89621: avoid segfaults during global destruction (by Gisle Aas)
  * RT# 87016: compatibility for libpng 1.6.x
  * RT# 86988: use cflags/libs information from pkg-config zlib
  * RT# 89261: split Tk/ColorEditor.pm into three .pm files
  * RT# 71718: fix compilation issue with 64bit Strawberry Perl (Tk_Cursor)
  * Fail gracefully if no font could be allocated
- Tk-804.032-tkglue.diff: no segfaults if Tk::MainWindow::Create was
  called without args
- Tk-804.032-freetype.diff: look also for /usr/include/freetype2/freetype.h
- Tk-804.029-lib64.diff, Tk-804.029-xorg.diff, Tk-804.030-libpng16.diff:
  remove upstreamed patches</changelog>
  <changelog author="dimstar@opensuse.org" date="1441022400">- Update to version 804.033:
  + New t/pod.t test (github pull request #16).
- Drop Tk-804.032-tkglue.diff and Tk-804.032-freetype.diff: Fixed
  upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1441022401">- Remove provides on quite wrong header file in devel subpkg pointing
  to perl 5.8.8 dir
- Use inline parameter for sed, well this should be redone more
- Cleanup bit with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- update to 804.034:
  Fixes
  Fix aborts on OS X Sierra, introduced by latest clang/llvm
  strcpy/strncpy (RT #121631, github pull request #28 by Mark Aufflick)
  No special xOKp handling in Perl_Value (RT #121528)
  Add freetype2 path on MacOSX / XQuartz to inc search paths
  (github pull request #21 by Christoph Lamprecht)
  Fix Tk::NoteBook's FindMenu (Martin Jacobs)
  Documentation
  Add Tk::getSaveFile Pod file (see also
  github pull request #19)
  Fix documentation about scrollbars
  (github pull request #18 by asb-cpan)
  Add openSUSE instructions to README.linux
  (github pull request #25 by Tux)
  Add documentation notes about "make -j"
  Tests
  New test for Tk::NoteBook.
  t/Trace.t is using now Test::More
  travis-ci improvements
  Introduce CI testing on appveyor</changelog>
  <changelog author="coolo@suse.com" date="1506254401">- use system jpeg to avoid failures with builtin version</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557316800">- Tk::Photo importer fails on some XPM files (RT#128103, bsc#1134134)
  * Added patches:
    perl-Tk-fix-for-RT-128103-XPM-loading-problem.patch
    perl-Tk-XPM-loading-improve-error-message-for-short-files.patch
    perl-Tk-XPM-images-may-appear-in-the-colors-section.patch</changelog>
</package>
<package pkgid="cb8624df4251b67d30f7e7f1e515706bcd1969b1a4189e83397aabc0bc6c9856" name="permissions" arch="i586">
  <version epoch="0" ver="20181116" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1543406400">- Update to version 20181116:
  * zypper-plugin: new plugin to fix bsc#1114383
  * singularity: remove dropped -suid binaries (bsc#1028304)
  * capability whitelisting: allow cap_net_bind_service for ns-slapd from 389-ds
  * setuid whitelisting: add fusermount3 (bsc#1111230)
  * setuid whitelisting: add authbind binary (bsc#1111251)
  * setuid whitelisting: add firejail binary (bsc#1059013)
  * setuid whitelisting: add lxc-user-nic (bsc#988348)
  * whitelisting: add smc-tools LD_PRELOAD library (bsc#1102956)
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420)
  * Fix wrong file path in help string
  * Capabilities for usage of Wireshark for non-root
- remove 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch:
  is now contained in tarball.</changelog>
  <changelog author="jsegitz@suse.com" date="1549972800">- Added 0001-whitelisting-update-virtualbox.patch (bsc#1120650)
  New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed
  stale entries for VirtualBox
- Added 0002-consistency-between-profiles.patch
  Ensure consistency of entries, otherwise switching between settings
  becomes problematic
- Added 0003-var-run-postgresql.patch (bsc#1123886)
  Whitelist for postgresql. Currently the checker doesn't complain
  because the directories aren't packaged, but that might change
  and/or our checkers might improve</changelog>
  <changelog author="jsegitz@suse.com" date="1556625600">- Added 0004-var-cache-man.patch. Removed entry for /var/cache/man.
  Conflicts with packaging and man:man is the better setting anyway
  (bsc#1133678)</changelog>
  <changelog author="Malte Kraus &lt;malte.kraus@suse.com&gt;" date="1560427200">- Added ./0005-singularity-starter-suid.patch (bsc#1128598)
  New whitelisting for /usr/lib/singularity/bin/starter-suid</changelog>
</package>
<package pkgid="b145f65a1ea2f94d4387979bdb0ba5ec97975ddd6eb7addb4763e81483c0b10a" name="permissions" arch="src">
  <version epoch="0" ver="20181116" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1543406400">- Update to version 20181116:
  * zypper-plugin: new plugin to fix bsc#1114383
  * singularity: remove dropped -suid binaries (bsc#1028304)
  * capability whitelisting: allow cap_net_bind_service for ns-slapd from 389-ds
  * setuid whitelisting: add fusermount3 (bsc#1111230)
  * setuid whitelisting: add authbind binary (bsc#1111251)
  * setuid whitelisting: add firejail binary (bsc#1059013)
  * setuid whitelisting: add lxc-user-nic (bsc#988348)
  * whitelisting: add smc-tools LD_PRELOAD library (bsc#1102956)
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420)
  * Fix wrong file path in help string
  * Capabilities for usage of Wireshark for non-root
- remove 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch:
  is now contained in tarball.</changelog>
  <changelog author="jsegitz@suse.com" date="1549972800">- Added 0001-whitelisting-update-virtualbox.patch (bsc#1120650)
  New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed
  stale entries for VirtualBox
- Added 0002-consistency-between-profiles.patch
  Ensure consistency of entries, otherwise switching between settings
  becomes problematic
- Added 0003-var-run-postgresql.patch (bsc#1123886)
  Whitelist for postgresql. Currently the checker doesn't complain
  because the directories aren't packaged, but that might change
  and/or our checkers might improve</changelog>
  <changelog author="jsegitz@suse.com" date="1556625600">- Added 0004-var-cache-man.patch. Removed entry for /var/cache/man.
  Conflicts with packaging and man:man is the better setting anyway
  (bsc#1133678)</changelog>
  <changelog author="Malte Kraus &lt;malte.kraus@suse.com&gt;" date="1560427200">- Added ./0005-singularity-starter-suid.patch (bsc#1128598)
  New whitelisting for /usr/lib/singularity/bin/starter-suid</changelog>
</package>
<package pkgid="d1f3da869eabeeed9953f4498f3693024a18509d3f8a44d64a60f6a8097d6ffa" name="permissions" arch="x86_64">
  <version epoch="0" ver="20181116" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1543406400">- Update to version 20181116:
  * zypper-plugin: new plugin to fix bsc#1114383
  * singularity: remove dropped -suid binaries (bsc#1028304)
  * capability whitelisting: allow cap_net_bind_service for ns-slapd from 389-ds
  * setuid whitelisting: add fusermount3 (bsc#1111230)
  * setuid whitelisting: add authbind binary (bsc#1111251)
  * setuid whitelisting: add firejail binary (bsc#1059013)
  * setuid whitelisting: add lxc-user-nic (bsc#988348)
  * whitelisting: add smc-tools LD_PRELOAD library (bsc#1102956)
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420)
  * Fix wrong file path in help string
  * Capabilities for usage of Wireshark for non-root
- remove 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch:
  is now contained in tarball.</changelog>
  <changelog author="jsegitz@suse.com" date="1549972800">- Added 0001-whitelisting-update-virtualbox.patch (bsc#1120650)
  New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed
  stale entries for VirtualBox
- Added 0002-consistency-between-profiles.patch
  Ensure consistency of entries, otherwise switching between settings
  becomes problematic
- Added 0003-var-run-postgresql.patch (bsc#1123886)
  Whitelist for postgresql. Currently the checker doesn't complain
  because the directories aren't packaged, but that might change
  and/or our checkers might improve</changelog>
  <changelog author="jsegitz@suse.com" date="1556625600">- Added 0004-var-cache-man.patch. Removed entry for /var/cache/man.
  Conflicts with packaging and man:man is the better setting anyway
  (bsc#1133678)</changelog>
  <changelog author="Malte Kraus &lt;malte.kraus@suse.com&gt;" date="1560427200">- Added ./0005-singularity-starter-suid.patch (bsc#1128598)
  New whitelisting for /usr/lib/singularity/bin/starter-suid</changelog>
</package>
<package pkgid="e3097803e1b841b34432a7cfdcf39a208b695696dbd1726bde53c9ddfa2bdb23" name="permissions-zypp-plugin" arch="noarch">
  <version epoch="0" ver="20181116" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1543406400">- Update to version 20181116:
  * zypper-plugin: new plugin to fix bsc#1114383
  * singularity: remove dropped -suid binaries (bsc#1028304)
  * capability whitelisting: allow cap_net_bind_service for ns-slapd from 389-ds
  * setuid whitelisting: add fusermount3 (bsc#1111230)
  * setuid whitelisting: add authbind binary (bsc#1111251)
  * setuid whitelisting: add firejail binary (bsc#1059013)
  * setuid whitelisting: add lxc-user-nic (bsc#988348)
  * whitelisting: add smc-tools LD_PRELOAD library (bsc#1102956)
  * whitelisting: add spice-gtk usb helper setuid binary (bnc#1101420)
  * Fix wrong file path in help string
  * Capabilities for usage of Wireshark for non-root
- remove 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch:
  is now contained in tarball.</changelog>
  <changelog author="jsegitz@suse.com" date="1549972800">- Added 0001-whitelisting-update-virtualbox.patch (bsc#1120650)
  New whitelisting for /usr/lib/virtualbox/VirtualBoxVM and removed
  stale entries for VirtualBox
- Added 0002-consistency-between-profiles.patch
  Ensure consistency of entries, otherwise switching between settings
  becomes problematic
- Added 0003-var-run-postgresql.patch (bsc#1123886)
  Whitelist for postgresql. Currently the checker doesn't complain
  because the directories aren't packaged, but that might change
  and/or our checkers might improve</changelog>
  <changelog author="jsegitz@suse.com" date="1556625600">- Added 0004-var-cache-man.patch. Removed entry for /var/cache/man.
  Conflicts with packaging and man:man is the better setting anyway
  (bsc#1133678)</changelog>
  <changelog author="Malte Kraus &lt;malte.kraus@suse.com&gt;" date="1560427200">- Added ./0005-singularity-starter-suid.patch (bsc#1128598)
  New whitelisting for /usr/lib/singularity/bin/starter-suid</changelog>
</package>
<package pkgid="a026ee9401a960fcf35758f6349eb26dc6f1a711c9e7020ff1844a094b55aab0" name="php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="50d00d5fba1016d4ead8b651b9879942eb02dac2b39cab590a73c802ed37ad03" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8b49b2de5fda579e2a453a6c68392596ac6e92539a33b206a05c0274b23ba21c" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bdd3c2c2e0ff2ed5c637c03fc6623a97ce4d29b1d3c904bfcd7a306b91c88215" name="php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="6b881ec1e94eed7838118b749d8c5a1fd2e2b53b6e1bec9582c92b48a697269f" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="7a9a6bab0b2e41726ffd85f29a1a046ca79ce54977c9e7af04dbe871f9876628" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="497d1119478d6c98610b1cc8274d661217d6a55b5a105d241de075614463626f" name="php7-bcmath" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="1d1440e213195c9c00cfa68ff2b6c3490bebe6cb99dfda0e0520d683c7784154" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="db3a0cb3526f0e35e9947c96b942924eba96ebda8182cc620d377740af9f42fb" name="php7-bcmath" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="1c90323aa798f9e5f4b436c88d2693ab2c9830bd467ac650c122b76ee6bb8bd1" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="5cee06da781157c1ecb603c19a01cd7ff52079f93364099d6fd78ae01a4b8e0e" name="php7-bz2" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="4dc10e30fabcca835750aec8d2ee5a6d98afa125991ffe5bce8c0b900c00cf59" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f304558b08e68d833c20f43e1624fac834b7edd11243d6e2a86b66c55e52b4d1" name="php7-bz2" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="18a2205a1bde1cde6e74782b739c84364217e77a509b66fb6908f24e025d5a37" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c4b11d6cfc3a4f8c804ac2ad211d2710920b670b29ba096ea44a4bc8e0fe79ee" name="php7-calendar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="d3b1c433d4ba6f2e60a4a4640b61400f879093b2b5890c5f7aedbfc22238eb2a" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="34db166f420fbdecb240ec521e2562e8042a314215989655a8c95671cbaa490a" name="php7-calendar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="084f5e7c45535610f6e00016bde746ff262def801bfcf071320701239a21af41" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="0af12c5c643e24f828028e719b9d32fff06cbe3546385624734758f09c38dc10" name="php7-ctype" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3ce0d75383fd199ae40743b851dc32a922a9f306fedf428f8accc43665c3ce9c" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="e078e0e9f63f913117c5adee5904c7fd5d5a8bdb3b40fceb79fea266ad2784a3" name="php7-ctype" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="192e1dd870762128045cbaba71f9705d2497b00ecdaf2d397d86c396f9d99e9b" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="6d4458ef11ca2ade9f8c00f3f2a9186c5647e4990485c64b193dce80372a5c51" name="php7-curl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8b9866f56572b2541c40c9aa7fdd9108b9caed04377b99f676a64bc2daf51429" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f4f019913e6980693cb50a08e0ebf3a27da804ae80eb460d5344f40c19f29539" name="php7-curl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="572fa5a1fca6ffe39bb9c07cb20f90a7df95224e2fb22420cd7974d1ccbf7f22" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="ae9538d0e11161fc353d7c9b606187e2baec05901ea07d07d2aa7e9bdcab5a53" name="php7-dba" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="49982485f512ad08091a917f54951fcbd812d46719eeabe6ea2020b13d5fb5a5" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="2f136697f2e1f13ad1da30f67ce95b30a580e255b32901da5f48c5d81cd544dc" name="php7-dba" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="6bd8774766519b47b8934da93eb8244eda30b62aafd9db2346ad9131d02f7193" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d3956e6d2204801ce0010653e58ec8166808b43611c4e67effe1a972d0cb4be1" name="php7-devel" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="79f859a1b7f191b3699375c427bf870cedba32fd6648168be24082dbae4b54ec" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="4dd7ddf2ed02b8a6cf90965bef6e6a39842c3e2747179b4c6c66662af8a0ab37" name="php7-devel" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="abed079e6d12a09a182cb12fd8b1775a1bbbaab6ed6a189d6ceffa742f3641d2" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b699199683647ee6c945770c83b1e5c425c99876d39720b7afce0c269393dc1e" name="php7-dom" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f2642fe88eb118f51e93688020494655d0f94fc75ca68895544fa770984c8bee" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="5afa3a0912e4ce2de5bcc3f7e0dae7723a0cadc3a86b751ee25eafaafd67c961" name="php7-dom" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="7c49966f550282a352d9b79e612ba49d20a97b1081ff4f16a9255411823d60db" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c61796165fdcf288ae48c4ebc84def81bda918aaa24f7cb66bd0a283b5dcacf2" name="php7-embed" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="01113680d8fd5e20e13b1b5686227c4c078c933c6698f6e08d3758566b4bc12c" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="48c20df7bf2863725bb19b482b8d761eb57c84649992c03933e8b73006401c63" name="php7-embed" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d1ec1aa7def294e322522d78cc45c64bbf4e2ec345930374bde31e7a5961df95" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="4cdc91787be6252ce42939112c2c9f05903f31b40b2afa0050488d8b84ccf5b1" name="php7-enchant" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="258953e21b826d82ab734edefc81b46108b04d2d8d9f97aa156e05db585ffd8c" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3b2067868416d953e30c359a2b8addbd8ae32ee1d0af052825ad5f1ed46ff762" name="php7-enchant" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="81f22d4225c8a701a727b5fe443b5b2c1cae5e3b0b69aacc14f54e9ec52296c8" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="81d59cd5246e8378173efd5cde187335900dacc7fccf01aeeaf8b1219882eb20" name="php7-exif" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="100c755f066f487f98bd7db6dfe3b7403c6479284cca72f79db893d4c5ba528c" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f3269ff5379dbb20b356ce04b0245d9c67a4e59ebcb78f3fe52a7a9027cdf14b" name="php7-exif" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="5580f6d82674df15cdcc9683bb40d6561f1345b133dd6301d562174273174e13" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="100c83b8afb6bf4e3368057ffc981a0e0efef7084063487891c5a5583373f493" name="php7-fastcgi" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="fa81b85ae95029643c539573ecf5816c2a4b75de939d61d3558be3147c0adee5" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="94397c431bd126276e5601c382c8fa9973ae8f692553991f9bf0d357fdb83aa1" name="php7-fastcgi" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="3dc1cbbd62a3652b45c2876cc30563169431ddeb4ae3329c1f670f0f7c8fe72a" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="747a389eb1f489aafd2efad90299e2ee3085aabe460cc313fe1ccacb3ae3a637" name="php7-fileinfo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="966cf0258a10505ede62472dd098c0cb354ffc849bd5575b05b0928541670992" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="145f4de40d08f4539279b84aa29f554339eefb2b6864656ad49e49debb7c928f" name="php7-fileinfo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="be3b4cab854d81391f0590bd1a9b925bddcfc828d51e68092f5da4e909e45ba3" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="a9dcba501121434a1752cc696aaaca5efc3ab0768ad8a5795925d643fcf19acd" name="php7-firebird" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3c7a01334e1db7e2f3014544bbc3bce804fd20325a8a4d541212cbcad4594d17" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="598de0607af01f88d0b2f401b2ca8ddf8d536dcf64d42f009e12c8a4ae904f66" name="php7-firebird" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="518ddefe4d982191333c08803089ea94bd312f245edb11d97a04658b6e45baab" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="333439fd3d5e5fc422fd100c3abc0d02cebe926b13f9aefdc0fd990fe7d07061" name="php7-fpm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="4c308749a1b35b291763a21af2f36212b2b8516e76ca62cef17a7628139cdad2" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bb3a6ae599b685907b88520ddbc3977d2bc1406697188c304879c1b99cd3f382" name="php7-fpm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="f698ab97090ae7b3dbda8395f4e447a67e9ba21dd25542c6f27de889be9ed9fa" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="eab74c33cdfaaa5e5b2b6451ddc9139c9d54ebf347e567a23ae032a1f49c71f8" name="php7-ftp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="5213a56a723f34e0b1e580de8466f60fdb7b6324ca529ca28d153ba73d5480fe" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="ae25400af5b1768db4f5231f4e2a456df62c3c0203cbd15a18e31e9dd4a37b13" name="php7-ftp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="fbc00790b65a25fac6d2fa9f774ba24aab92d0acae5c5f419d587e86c6b3f589" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="39d27d5e1de57594c2bb7cec4f6478099e46b1969277662d2b07f3b7a77c9426" name="php7-gd" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="19a6f0168cdeff66347a10f5fa61c3b340515912601bcbc3e506297c10d4efd8" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="12565617e81b302186d5fba43ebde8f1bc2b823ab019edb116567650a4d66f00" name="php7-gd" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2a17ceea6e3696c41d0c9a267c8531abe1fe0ca1c743c3ba38d453700412781f" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="cdb32b6cdd9a27b77a38b36959d728a2074583e3bcbb3d24c006872bdccfd88a" name="php7-gettext" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="892d538b5842d096727e97ef7d5de37ac62bb1b3d0d3643d6c253489e0abdd39" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="9d830534c528e9875a5befa4416abe4b597aa9d22d2bfbd1f130d7e2024f80d6" name="php7-gettext" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d2d83d38e244d2880dccb6b118558d39530a56eed609b4a31a56001bf47efb45" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="52be8dece4b920eadee94d5b1a0813fa9459330bea5b556f7312f4d744f25b98" name="php7-gmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="d53842a0c77d09cd492efa6b5879cb55a3e23fc2479e51abeb0e0044ee2faca0" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="aff455a2d2668138b67d80e43fc8ece8c86bf67ab8cc7f58f59f5ea9955773f4" name="php7-gmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="a80381084ee64cac55a8147a7693f655e839621921f1ccf299d5ba8282f25511" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="f37b1b50acc4671930956d7199ba4e8e033459bfff1fabc5b40c6522d637bde5" name="php7-iconv" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="adcea8ab0689f05f4c9d151a8b84642b65255c4dd3bedb0f2c6b0b365f56e15d" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="72b69097050d381cec45be5dfbd63bad6bae48c725dc39fff8626115ebf0a405" name="php7-iconv" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d9a2be99eb47d7fe4e2572ecd0d04c85376316fc4d048d1f9ffe78c1d1c75d23" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="7b5eb9055e3d34d770a4f7f17013396b1b8b2ba1e7b9ca1f35dd5ab87452abf8" name="php7-intl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f614a05d6e1e0e6a96aeb7a0591bea968aae8ffeaeffa7a8c02a289868b6d39b" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3428f0f44306fad95e5f162fe6d7397d0a6ad852244afde3a73a983046435cb8" name="php7-intl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2a4f37e69d2db2ac41a0256f85557f74d0bd3cce85565a4725142ff0e9a610d4" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="bc8ed5af9b63f24649903f24e68771ab4031eb760acfdf8650fa92d4e09e6c39" name="php7-json" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="7df689d3ed0a60d98e7a80bd030958c6c603593e6bf69875a35a6c006252aed8" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f8d7e6dc2c134fa78b391be87ae9316b0dae8a91ad7b1d015d07607f96290315" name="php7-json" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2060e4423478ec0f1854171470bb6266d1cc42a0fb3852274a78bf0fb1baea86" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="da1ba80b2858e306ddc632ef8acfeae08df448075634356a3e87d6defda3b546" name="php7-ldap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="a2b3d589149d9255641e5bb11bbc7569682513d61ca5cd3ecc89a055c94c2d6e" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="9dfe8bacaab4327f6e5aa5c19f4080d954b2e6e45ac74468eb8fb6a748107fb7" name="php7-ldap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="ee68e3ddd50066725d480a2c23b9ed16f86172b7f78ae28d8b009cc6489dc723" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="75648fde04b4126101049559784e586708e477ac06768355d59369d81433357b" name="php7-mbstring" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="2150ea7998959ca19efb50478e1732042d389426a617365a84b6d201b1efcc35" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="99936c1d71ba68b58a3638ecdb15f573ab5f45efa843b476bf83f5e9c7d08aa8" name="php7-mbstring" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="0f67371efc1e873959254e7f04a09f62e1a266524fd98ef234dc627763bc9ec5" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="51b0a6e6919ed1fb9d1baea336cd31931b5630e89330ba430ee062be80d13537" name="php7-mysql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="d596742da533d0e2f49a7dffdba0afd5ab73c7fe584f2f4013e96fa66e00a26c" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="b345c46b4148296cc21b75bddafdac978866fd4739d5c3a0e978bc91ed443293" name="php7-mysql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="269e0ae999e993e0316b9e019e43b3c32acfbc99f918b596181a2221f469a860" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="8a56d089e7f40007995502998f6965a15ffb255c41661f88760295a9eaf83888" name="php7-odbc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="8efb5d8f8efd5bb2a424f8c880623e403a961391e29c1037047d9869f9651430" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bfed37a6df5ee35b9fc569ee68b2cb35a7929a2321477c655559ab02bf1e293f" name="php7-odbc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="7cfb926410477220694a03fd26d0fd533f2defeba386cf534615afeaf4961c2a" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="afaff6ff9a921f362488c57e3fc2e793def10d8614f0d0d3a3e30dec89f997aa" name="php7-opcache" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3e7c6230e52e5a83062307e051f736fa8711a37c96bf4f5b01c01a5d65168f7a" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="7b06773f140af207dd9908fde8504e4bbf5b1d6657f93f07706420a56de38f15" name="php7-opcache" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c7e828b5545ce183c8331ac15813f3d61974347fbec3fbea1189423abc3f35b2" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2ecbe30a64c244979e32583ed4cdcab9a5e87640b278d86f8fd37ea656ba8e78" name="php7-openssl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f3a5a3abb2c1b9044e45ec6551ac18d9f80a756b18d6a7ac4cc73d0686cc7df6" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="941ebb92ec10c10b10c80a86803de4d46a6f746beb5fc8538089694c17b24196" name="php7-openssl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="676f7a74312de75f1038c1a9279dc77a8e802112cf13b49e12fe23b620cfb082" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="9a45520a380cf9361629be9eafe74061ec965664d95f8e4716a13897705271a7" name="php7-pcntl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="52433f5bdeb6f712554c8630138c21ddfd0dd5912b9436abd9280fdb40ef5e6e" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3b0605c906c2bfec2238dc4358a0dfe262f34bac86b792cb6e8ab4b3cdad1fc0" name="php7-pcntl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c4c30875da259780dd25fe177e7dffa1cfe6e57bd0734fcf1783e899969159e2" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="8a912f8fce5740dfda77fcd6b4c2efd6a6f2bcbb22436589af5aa5d7b3c4965b" name="php7-pdo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="aebf4569fcf480dc4e4c34fa4378f27d28f420379c3546b248fb03f5aba9522e" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="9777fdbd53a03f8d19e49f2cfebc1ec1761965209d7226ff2f8bd1c23619e0dc" name="php7-pdo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="15ec6c446568f704e0ac69ce7bd0fb0cc2bcd603a9eeddc5a3f78e3c7ac04325" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="77a05b500d000332dae292ba0b8555071470c7ec775d1d974a339afc1e179696" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bb1b273120c3961277890a28ddca69cce8719cd5acbf5cda28fb041f14154755" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="a43e4ba2174b3269921e844bf6e585da57f463a4f17a3d6214f5cafc32b86883" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="79bd5430531ce870384aa347e25a2bd4a933be9ff1e86512c84d23f753835b6f" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="380eb9c681de2785994bfa307ed23a0fe604407a24648bfde32f2db2fe0263c3" name="php7-pgsql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="9f9cd4f6d39eadcb203bda7bce76a2ae8a3b9e312d9c59fdddce0e8222a58018" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bfa525f78045d8a18c5363a867040847d1e66823f80af6a1cc603714f1ac98c7" name="php7-pgsql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="180e3d955b1f65c784b9920bae95bed52e272af7c3291dd8ab5464a10f344c53" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="0a46cf998f2714c9017950e9652c58a7d7d847f0123b6af88460df9bb3885b99" name="php7-phar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="b22eba8ee967a78f4a8e4a9dc877ca5b37532c717d218edb0ae2d5c005ec4c75" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="10b4d83cbc37aa81a470d01910f0fce2eb6158c98f9babebc3034ce05e2290c5" name="php7-phar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2d678498d55a427938cfe0492cc66ba2b057b1bab7f9c4605bfe46470c187a52" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="a472e8cdc23a404ca1448eda2a1986c6150461ff24b264dfb96d201ff2cedefd" name="php7-posix" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="9f7a19c4d0b9ee4b442f9379c5e137dcbdb4873c6554d34685177f23f4e5d542" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="718be54202a40e5680eaa563ee0dcd2b80807eefa13c92ae0879025733fc093b" name="php7-posix" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="bfc9d1f3169cc16b9b5a60233f124c4167b61107d237c6e0e51e885c6f483610" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="6ae20f63eba02f74f35ce8d5355cce859f3cc843e07979d752ba1429f1f057de" name="php7-readline" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="1d6d4897a1774334327221c044d74661f4b92e0e46dae4d161d209e18e8ca864" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3b8be3eb2c8d67be363bfa7a4fef1be939035e4f7708c50a5cebd8664a6faf6f" name="php7-readline" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="199b52c6bd4f066ee6879ecd9adcf8054fde08d5bb1af75ce0917c2acecd4808" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b244abb3302d87fb7a68fe9cb2a31e24b729375a0bedfc2dc1341ddb409abb61" name="php7-shmop" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3080820afce511264b3baf1bf27fa2f3edb18084f1e42196193a9edab08872d7" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="86f3f33ec82d6c5f8fdec2777df1389b0315266247aa7829bb039c1afd397b80" name="php7-shmop" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="5466870308f2adac7eff31eb2250bee40b3f54b2e8e1926e24c9be3b9eab6ab2" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2a1de9ffafb0c9b04198d3df513451153f7dc92594af47ff8b7cc15d7226c08e" name="php7-snmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="ae56cf1819fe0f941d7a9b82eaaee1c33f530203d72f2caa82a378d40d0f1c89" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="3407a1c69e9cf180d9edcb442d7c388438f02f0cd97726f39d499c6180f3cb72" name="php7-snmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="82543eb76bdd17c9eebea7aeca611b84a311d793a7cc108b6cd509d5a9c47770" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b077deb2564052ba0c68dbc9f3ab0a8f1a786949c1c2e271c75d305503b7bf72" name="php7-soap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="27bb7f10c04805cbd0526b4fe0983b59cb72e7910458d4dc90db5eed5ad34ed7" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="57a46eaebcae73d9950d7f61a3edac8b184f87a37a7e327bc19bcd34db4c7951" name="php7-soap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="2722670d01bb32b1f5761273b25bf332f69b1f13d3c14b50bbd3ff73d5c29eaf" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="94e033e302082f6a790103fe19d9f9e0deebf8bf5f659e29ad7527a20157ee4a" name="php7-sockets" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="a8bd75cd1d7f482ca6658073959ce73bf2c383c2580eb07e11208605f468d798" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="6700357a064125a4ffc71d4fb2bbd0d4897db1e53827dbead95d7aa8d4d9b8e5" name="php7-sockets" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="aee53261e9dbbcc0e8534d2373de2acf3494376e259d56fb34ec05e533282ac6" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="23bdd4eea886f22d5d7ad116e3f6728d7667315c90bea41920c1ad683e8b602f" name="php7-sodium" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="2266ba07b307da2b3531ca56fb98ee080a472b1f70bbcca7d3a31027dfd586a3" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="ed40e32c0f8e6e306aa8a2a56f4b4daf9d8f0ed20e80b87929b54c7e06416164" name="php7-sodium" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="35a7825e8b201689a21a4ba9f5179dcd1716ece5b0fc9719e64d008c2521737d" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b967a69d82f589ef22dec8644e82222d13c670deb40ec69c6c1f9073d0840582" name="php7-sqlite" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="33f7d7be2936156ea6a38b318ed4c905a8945148c2b0992e025642e54039eee9" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="1b232979374f485662e782f680992dde5eae125871be437d9c1e6af2ab311666" name="php7-sqlite" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d847135d2db7009b3b5be4420ef62c53bbd6c490f207a050a4422a9c5d4e8151" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="173f1aab8fcedd0eb66e242758efe496b0e30d1d5a7bf4ee66c2b7ddb631fb86" name="php7-sysvmsg" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="098e5bbb492dbc6bf92a09d81b7d54234282fae908b59c803f405395e32e3a1d" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="ca4eeb4a8f10bf743d4e07f3e52084b00e3b017dfbbad58ffe3fc33e3fcf646b" name="php7-sysvmsg" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="604a41cca1021f4a07675ba936578a94f76b846f41c0f6a713ad0c99b126cc30" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="348ec053c624d760b2fbad281485e0dcee6fc3fd7b234b996f577a38eaa08db8" name="php7-sysvsem" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="662a2aaf2be35d99356fed51262fb7e9501e2fa5aa43eea4302cd5fb3e36b6e4" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="6123dc59be0ff72921c33686a27474b07a8f83cdcb40d4286865c90668fecfa1" name="php7-sysvsem" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="14dc756e071fac1ccedc59fcc84936e6350fdf595b20c5e51dc570d659686d57" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b314ef4993be4e62c471a5d41e9db07dfd87ee391a9a02664749d791fde8cb19" name="php7-sysvshm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f25d0ad9d49f9752ca501d027d810d65ac82d17d878ea2f739593ee99a0bb77f" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="5988589cbc80ed9a1bcd0cbb8bee196bc0fdcd2c6eef20f2a7945c82eab91f1a" name="php7-sysvshm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="8704225f9d6debc9903f4bc84197eebdc9db18779467a75967070d4a8e206199" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="07b329968f9a4d7d105ac6ab21c0d36ee458225ef392a193071c10fa6032a849" name="php7-testresults" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f28d6ac604affca58595d6d8bde2133aa955dbd0b316d015b3feb45fc420c197" name="php7-testresults" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="11bea5eab377f8cac23d2f1dd8829047685ece6c32ca51728a5cfc68d73d9bf2" name="php7-testresults" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="5ebcf8279d851ea0ee83ff0d25b4550bcc28348235281a31be099fc8bdec74b6" name="php7-testresults" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="660704775f03ac8166ff0cda172c9576e56d09f014af4dff3e5814ff80e1a23b" name="php7-tidy" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="2f57c9e7750bc18f84ea9656db7d61771f87584b9ce522b55d12e878331b6fdf" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="f21da0484846d8b783ba4d5680ef7b883697ef5d0f7bab46ea29bf2dfeb4efd7" name="php7-tidy" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c770096e20406f05a8c673515217cdd3dd39d7bd47ea4e6a08f2985fdb3450c2" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="c6f34a3baf49c20f6089db56ee791059a0128b9704a0f0500f7b14f51609848e" name="php7-tokenizer" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="b4fb84d414930f2d3c090099ac29b883662d1c244b79a5cfbdb59c9d4aeccbba" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="fea1babc3a670b325bfe6aede4a413f83b1aeb14baa1b65e9ed2bf78d115ba78" name="php7-tokenizer" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="90665b71f781d7d52cf2946e1a678ba2ad075c6610d357e669260efe04cee3d6" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="4c8c99983981f767e45623c6a286c93cddf5aa7f2ca18ae824aa23e645742321" name="php7-wddx" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="cd5d9c7516cf64d8557c4cbd6a695ea32ea2a6c80f0b4b79c1336ee39254f58a" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="6f95e84cd9b08797980c9c115442874ccd8f5d959a90940b021184dd325389a7" name="php7-wddx" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="a5003368e359b71a6f6a394aef6e006240ec09e0a749073101bf5b2313ea102e" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="121470afbb3c485b114034d9b371dc60ca77b5409daba2432ab5a8e33a7a547b" name="php7-xmlreader" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="b25f3a3a3a6c434875ea7762ce1babef5195d94d7498f535fd35e444c467af8b" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="477e6f4a584db6a14b264f01a80ad76b6d18ce252dd37767d51b3cdafa997a2c" name="php7-xmlreader" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="129d1bdce03e9fa666cae821d56b3ac8a4a5c441c72af6b5f26baaa34b781003" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="8256642748d265601f6f73c4bc0f170f1f8a959cce608529d0c80ce70b10f47c" name="php7-xmlrpc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="1db8b58cad07d8a37c2931c7372f2177dd5afb3750546b2474c0e7bcde335ba1" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="1b33228e52d37079253cbaf484fc6d5a24ea06dc677a9c760278e80a895912ea" name="php7-xmlrpc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="29c8829b792f0f451e613b96a7ec1a1f83592d2031cbc4946d7c64348b72d2fe" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="b1f72be2576eebad0e7ea52c314e9e13141b77c87ef208343295a68d7ec42932" name="php7-xmlwriter" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="95c432cba6a5aee58f066474e2eccbf2d61d599ae48e260684ab51fd01e1d837" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="ff580067ff2d61ffc3366ef9234b44b81131af95d6585f0dc12d49731d81f28d" name="php7-xmlwriter" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="20fd482947cd7aaca0c9b7863517843f990c84bcdc4bee102ccb3fd591ddea88" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="1d7c01d53524ae4c1278efb1f39d41decbff54eaf86b26d7cf75a522aa8366b5" name="php7-xsl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="7a887f7a11a717e71a91b95d410df706459a9442c9ef744a8d5fcf165bb7bd81" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="c449c75b348339d6adad22a8203292f33120ccb2d2af9287b4d34fbe496f67ff" name="php7-xsl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="774d5f7ca93528ac9678ba35dd693eaec3578b211148b98ebbb53d3b3f11e606" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="544d1e62f14c149a624478add87f9980eeb062bea064c24a81f47bbd360e8230" name="php7-zip" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="72e4bd818840899b03e35c03daaffe3970a468e28f223988e8e7ac7cabfd3302" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="bf7c466aad3c95974575622eb612523c72b592fc70dc109bb04efdf4976e57a1" name="php7-zip" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="4b30d7e1356c914abf8dde03ef0c759781712ec8af2160d0f382be3a2b240b21" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="d11f7e016740c6b991baea4f95f9098db396e3c69e476c1b9678907c231c0e1f" name="php7-zlib" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="6de3fb4d285235866046200cdb856fabb80b1e3bead4fe35f5c53296aa86f038" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="06676f4b8cd837508e3c221ec54ee30a2887151c7e68a16a37a49e25f453138a" name="php7-zlib" arch="i586">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="49a167fc1843383cda79f5c4f5c2aa6506f8390584db2e51bafd6dd8c7cb04a6" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp151.6.6.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="874367e1821abcf5fd877d8c6bffe45d6f33f23f88be6b080b8bcb6628123568" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="4.9.0.1" rel="lp151.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
  <changelog author="ecsos@opensuse.org" date="1535025600">- update to 4.8.3 (2018-08-22)
  - gh#14314 Error when naming a database '0'
  - gh#14333 Fix NULL as default not shown
  - gh#14229 Fixes issue with recent table list
  - gh#14045 Fix slow performance on DB structure filtering
  - gh#14327 Fix Editing server variable not showing save or cancel
    option
  - gh#14377 Populate options for view create and edit
  - gh#14171 2FA configuration fails if PHP doesn't have GD support
  - gh#14390 Can't unhide tables
  - gh#14382 "Visualize GIS data" icon missing
  - gh#14435 Event scheduler status toggle doesn't work
  - gh#14365 View not working on multiple servers
  - gh#14207 Partition actions in table structure do not work
  - gh#14375 Fixes ERR_BLOCKED_BY_XSS_AUDITOR on export table
  - gh#14552 Blank message shown instead of MySQL error when adding
    trigger and other locations
  - gh#14525 Fix PHP 7.3 warning: "continue" in "switch" is equal
    to "break"
  - gh#14554 Icon missing when creating a new trigger, routine,
    and event
  - gh#14422 Table comment not showing since 4.8.1
  - gh#14426 Drop table doesn't work when you copy tables to
    another database
  - gh#14581 Escaped HTML in 'Add a new server' setup
  - gh#14548 [security] HTML injection in import warning messages,
    see PMASA-2018-5
- fix for boo#1105726
  - PMASA-2018-5 (CVE-2018-15605, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-5/</changelog>
  <changelog author="ecsos@opensuse.org" date="1544616000">- update to 4.8.4 (2018-12-11)
  - gh#14452 Remove hash param in edit query URL
  - gh#14295 Issue in Changing theme
  - gh#13267 Ensure that database names with '.' are handled
    properly when DisableIS is true
  - gh#14438 Invisible Icon "Show Full Queries"
  - gh#14133 CSS issue in Designer
  - gh#14447 Error while copying database (pma__column_info)
  - gh#14571 "No database selected" - DROP a view
  - gh#14636 Move operation causes SELECT * FROM `undefined`
  - gh#14630 Enum '0' produces incorrect search SQL
  - gh#14223 Fix TypeError in database designer
  - gh#13621 QBE selenium tests broken since merge of #13342
  - gh#14672 When logging with $cfg['AuthLog'] to syslog,
    successful login messages were not logged even if
    $cfg['AuthLogSuccess'] was true.
  - gh#14339 Fix infinite loop when sorting table rows by key.
  - gh#14658 Regression on multi table query functionality
    (foreign keys)
  - gh#14617 Fix designer errors when database is empty
  - gh#13032 Fix designer errors when database contains special
    chars
  - gh#14352 Fix designer javascript errors
  - gh#14764 Fix left/right icons hidden
- fix for boo#1119245
  - PMASA-2018-6 (CVE-2018-19968, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-6/
  - PMASA-2018-7 (CVE-2018-19969, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-7/
  - PMASA-2018-8 (CVE-2018-19970, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-8/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1549022400">- phpMyAdmin 4.8.5:
  * CVE-2019-6799: Arbitrary file read vulnerability (PMASA-2019-1,
    bsc#1123272)
  * CVE-2019-6798: SQL injection in the Designer interface
    PMASA-2019-2, bsc#1123271)
  * Fix rxport to SQL format not available
  * Fix QR code not shown when adding two-factor authentication to
    a user account
  * Fix issue with adding a new user in MySQL 8.0.11 and newer
  * Fix frozen interface relating to Text_Plain_Sql plugin
  * Fix missing table level operations tab</changelog>
  <changelog author="ecsos@opensuse.org" date="1559736000">- phpMyAdmin 4.9.0.1:
  * Several issues with SYSTEM VERSIONING tables
  * Fixed json encode error in export
  * Fixed JavaScript events not activating on input
    (sql bookmark issue)
  * Show Designer combo boxes when adding a constraint
  * Fix edit view
  * Fixed invalid default value for bit field
  * Fix several errors relating to GIS data types
  * Fixed javascript error PMA_messages is not defined
  * Fixed import XML data with leading zeros
  * Fixed php notice, added support for 'DELETE HISTORY' table
    privilege (MariaDB &gt;= 10.3.4)
  * Fixed MySQL 8.0.0 issues with GIS display
  * Fixed "Server charset" in "Database server" tab showing wrong
    information
  * Fixed can not copy user on Percona Server 5.7
  * Updated sql-parser to version 4.3.2, which fixes several
    parsing and linting problems
- fix for boo#1137497
  * PMASA-2019-4 (CVE-2019-12616, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2019-4/
  - CSRF vulnerability in login form
- fix for boo#1137496
  * PMASA-2019-3 (CVE-2019-11768, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2019-3/
  - SQL injection in Designer feature</changelog>
  <changelog author="chris@computersalat.de" date="1561896000">- fix changelog
  * add missing boo# with relation to CVE and PMASA
- rebase phpMyAdmin-config.patch</changelog>
</package>
<package pkgid="a456a731777ed4a0b953b32bfe291d9e5393491b45c199ad6750c17ffb78332e" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="4.9.0.1" rel="lp151.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
  <changelog author="ecsos@opensuse.org" date="1535025600">- update to 4.8.3 (2018-08-22)
  - gh#14314 Error when naming a database '0'
  - gh#14333 Fix NULL as default not shown
  - gh#14229 Fixes issue with recent table list
  - gh#14045 Fix slow performance on DB structure filtering
  - gh#14327 Fix Editing server variable not showing save or cancel
    option
  - gh#14377 Populate options for view create and edit
  - gh#14171 2FA configuration fails if PHP doesn't have GD support
  - gh#14390 Can't unhide tables
  - gh#14382 "Visualize GIS data" icon missing
  - gh#14435 Event scheduler status toggle doesn't work
  - gh#14365 View not working on multiple servers
  - gh#14207 Partition actions in table structure do not work
  - gh#14375 Fixes ERR_BLOCKED_BY_XSS_AUDITOR on export table
  - gh#14552 Blank message shown instead of MySQL error when adding
    trigger and other locations
  - gh#14525 Fix PHP 7.3 warning: "continue" in "switch" is equal
    to "break"
  - gh#14554 Icon missing when creating a new trigger, routine,
    and event
  - gh#14422 Table comment not showing since 4.8.1
  - gh#14426 Drop table doesn't work when you copy tables to
    another database
  - gh#14581 Escaped HTML in 'Add a new server' setup
  - gh#14548 [security] HTML injection in import warning messages,
    see PMASA-2018-5
- fix for boo#1105726
  - PMASA-2018-5 (CVE-2018-15605, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-5/</changelog>
  <changelog author="ecsos@opensuse.org" date="1544616000">- update to 4.8.4 (2018-12-11)
  - gh#14452 Remove hash param in edit query URL
  - gh#14295 Issue in Changing theme
  - gh#13267 Ensure that database names with '.' are handled
    properly when DisableIS is true
  - gh#14438 Invisible Icon "Show Full Queries"
  - gh#14133 CSS issue in Designer
  - gh#14447 Error while copying database (pma__column_info)
  - gh#14571 "No database selected" - DROP a view
  - gh#14636 Move operation causes SELECT * FROM `undefined`
  - gh#14630 Enum '0' produces incorrect search SQL
  - gh#14223 Fix TypeError in database designer
  - gh#13621 QBE selenium tests broken since merge of #13342
  - gh#14672 When logging with $cfg['AuthLog'] to syslog,
    successful login messages were not logged even if
    $cfg['AuthLogSuccess'] was true.
  - gh#14339 Fix infinite loop when sorting table rows by key.
  - gh#14658 Regression on multi table query functionality
    (foreign keys)
  - gh#14617 Fix designer errors when database is empty
  - gh#13032 Fix designer errors when database contains special
    chars
  - gh#14352 Fix designer javascript errors
  - gh#14764 Fix left/right icons hidden
- fix for boo#1119245
  - PMASA-2018-6 (CVE-2018-19968, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-6/
  - PMASA-2018-7 (CVE-2018-19969, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-7/
  - PMASA-2018-8 (CVE-2018-19970, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-8/</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1549022400">- phpMyAdmin 4.8.5:
  * CVE-2019-6799: Arbitrary file read vulnerability (PMASA-2019-1,
    bsc#1123272)
  * CVE-2019-6798: SQL injection in the Designer interface
    PMASA-2019-2, bsc#1123271)
  * Fix rxport to SQL format not available
  * Fix QR code not shown when adding two-factor authentication to
    a user account
  * Fix issue with adding a new user in MySQL 8.0.11 and newer
  * Fix frozen interface relating to Text_Plain_Sql plugin
  * Fix missing table level operations tab</changelog>
  <changelog author="ecsos@opensuse.org" date="1559736000">- phpMyAdmin 4.9.0.1:
  * Several issues with SYSTEM VERSIONING tables
  * Fixed json encode error in export
  * Fixed JavaScript events not activating on input
    (sql bookmark issue)
  * Show Designer combo boxes when adding a constraint
  * Fix edit view
  * Fixed invalid default value for bit field
  * Fix several errors relating to GIS data types
  * Fixed javascript error PMA_messages is not defined
  * Fixed import XML data with leading zeros
  * Fixed php notice, added support for 'DELETE HISTORY' table
    privilege (MariaDB &gt;= 10.3.4)
  * Fixed MySQL 8.0.0 issues with GIS display
  * Fixed "Server charset" in "Database server" tab showing wrong
    information
  * Fixed can not copy user on Percona Server 5.7
  * Updated sql-parser to version 4.3.2, which fixes several
    parsing and linting problems
- fix for boo#1137497
  * PMASA-2019-4 (CVE-2019-12616, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2019-4/
  - CSRF vulnerability in login form
- fix for boo#1137496
  * PMASA-2019-3 (CVE-2019-11768, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2019-3/
  - SQL injection in Designer feature</changelog>
  <changelog author="chris@computersalat.de" date="1561896000">- fix changelog
  * add missing boo# with relation to CVE and PMASA
- rebase phpMyAdmin-config.patch</changelog>
</package>
<package pkgid="355a4d2ebc4e682060cc11503e1b27708c14ee0d85477c54df89bb833a63c910" name="plasma-framework-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="7636d151553e113d30303596b4ad16d9196618d0628cab412d34937936f9e393" name="plasma-framework" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="3dc853ffa9f30b5186f4755c7e97809143f1a8d501bc097a17b99fb36cf59f5f" name="plasma-framework" arch="src">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="45f4004cffe2c5c9e60d034ed2316c08a1515e3dbb751ec20e840278516779ad" name="plasma-framework" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="76c9af0779e1c6ccea79ab7bd8bd4eb53210b823cb5e0c19fd822dfc9512a6a3" name="plasma-framework-components-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="94332e0eedc9c24fcb933940d1d26f2fd99a416017431151d71ba619724c6192" name="plasma-framework-components" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="38a67216deff3b2694c5b7d9f07b28bdcedee9998b4150f4338cff0749a016c1" name="plasma-framework-components" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="60945ec1e6e12efd515c1b586b732b56534390bc5985a25b6402888ac1a02d8a" name="plasma-framework-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="cc3418c9e0c366180d5f036ecbad8cb9633cbd3807581c7274409c0c44f32210" name="plasma-framework-devel" arch="i586">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="41c384ff0f1039b08f8fd1b919a7f2712f4b1adf12d53f51306bc8bddaafbf55" name="plasma-framework-devel" arch="x86_64">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="8a2f8a63b8494c307aba2244fd954d2aec2860559eff511f9f3fa104bf863841" name="plasma-framework-lang" arch="noarch">
  <version epoch="0" ver="5.55.0" rel="lp151.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * use the new value for largeSpacing in Kirigami
  * Reduce visibility of PC3 TextField placeholder text
  * Don't make Titles 20% transparent either
  * [PackageUrlInterceptor] Don't rewrite "inline"
  * API dox: remove duplicated deprecated comment
  * API dox: Use @deprecated tag for deprecation comment
  * Don't make Headings 20% transparent, to match Kirigami
  * don't put the fullrep in the popup if not collapsed
  * Remove dead code for finding QCA2, not used since Plasma5
  * Help automoc to find metadata JSON files referenced in the code
  * [AppletQuickItem] Preload applet expander only if not already expanded
  * other preload microoptimizations
  * drop the setting of c++0x
  * Set IconItem default to smooth=true
  * preload the expander (the dialog) too
  * [AppletQuickItem] Fix setting default preload policy if no environment variable is set
  * fix RTL appearance for ComboBox
  * try to preload certain applets in a smart way
  * [Icon Item] Set filtering on FadingNode texture
  * Initialize m_actualGroup to NormalColorGroup
  * Make sure the FrameSvg and Svg instances have the right devicePixelRatio</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1525348800">- Add Dont-alter-memory-management-to-hide-an-item.patch to fix a
  possible Plasma crash when changing the desktop layout
  (kde#391642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525435200">- Add patches to fix window thumbnails on Nvidia:
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1525435201">- Remove outdated calendar.svgz from the Air and Oxygen themes to
  fix showing event markers in the calendar (boo#1091832)
- Add Air-Oxygen-themes-Bump-version.patch to raise the version of
  these 2 themes, otherwise Plasma would reuse existing caches
  rendering the above fix ineffective</changelog>
  <changelog author="lbeltrame@kde.org" date="1526212800">- Update to 5.46.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.46.0.php
- Changes since 5.45.0:
  * Too many changes to list here
- Dropped patches, now upstream:
  * Dont-alter-memory-management-to-hide-an-item.patch
  * 0001-Revert-windowthumbnail-Use-gamma-correct-scaling.patch
  * 0002-Revert-windowthumbnail-Use-mipmap-texture-filtering.patch
  * Air-Oxygen-themes-Bump-version.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1528113600">- Add upstream patch use-qdatetime-with-qml.patch:
  * Fixes wrong dates being shown in Plasma calendar (kde#394423)</changelog>
  <changelog author="lbeltrame@kde.org" date="1528804800">- Update to 5.47.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.47.0.php
- Changes since 5.46.0:
  * Use override
  * Templates: consistent naming, fix translation catalog names &amp; more
  * [Breeze Plasma Theme] Fix kleopatra icon to use color stylesheet (kde#394400)
  * [Dialog] Handle dialog being minimized gracefully (kde#381242)</changelog>
  <changelog author="lbeltrame@kde.org" date="1531742400">- Update to 5.48.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.48.0.php
- Changes since 5.47.0:
  * Use more nullptr
  * FrameSvg: Update mask frame if image path has been changed
  * FrameSvg: Do not wreck shared mask frames
  * FrameSvg: Simplify updateSizes
  * Icons for Keyboard Indicator T9050
  * fix color for media icon
  * FrameSvg: Recache maskFrame if enabledBorders has been changed (kde#382324, kde#390632, kde#391659)
  * FrameSvg: Draw corners only if both borders in both directions are enabled
  * Teach ContainmentInterface::processMimeData how to handle Task Manager drops
  * FrameSVG: Delete redundant checks
  * FrameSVG: Fix QObject include
  * Use QDateTime for interfacing with QML (kde#394423)
- Dropped patches, now upstream:
  * upstream patch use-qdatetime-with-qml.patch
- Remove update-alternatives for input.svgz - not used anymore?
- Fix %_kf5_bugfix_version
- Merge -private into plasma-framework
- Split off main library as separate package</changelog>
  <changelog author="christophe@krop.fr" date="1534680000">- Update to 5.49.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.49.0.php
- Changes since 5.48.0:
  * if an applet is invalid, it has immediately UiReadyConstraint
  * [Plasma PluginLoader] Cache plugins during startup
  * Fix fading node when one textured is atlassed.
  * [Containment] Don't load containment actions with plasma/containment_actions KIOSK restriction
  * Honor BUILD_TESTING</changelog>
  <changelog author="lbeltrame@kde.org" date="1536840000">- Update to 5.50.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.50.0.php
- Changes since 5.49.0:
  * Workaround bug with native rendering and opacity in TextField text (kde#396813)
  * [Icon Item] Watch KIconLoader icon change when using QIcon
  * [Icon Item] Use ItemEnabledHasChanged
  * Get rid of deprecated QWeakPointer usage
  * Fix style sheet for 22-22-system-suspend (kde#397441)
  * Improve Widgets' removal and configure text
  * Copy PlasmaCore binary qmldir file structure into bin for unit tests</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539259200">- Add patch to workaround use of Frameworks 5.51 features in Plasma 5.14:
  * 0001-Support-button-icons-when-present.patch (kde#398626)</changelog>
  <changelog author="lbeltrame@kde.org" date="1539604800">- Update to 5.51.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.51.0.php
- Changes since 5.50.0:
  * Bump theme version strings because there are new icons in 5.51
  * add missing PageIndicator
  * better sizing for roundbutton
  * Also raise configuration window when reusing it
  * follow colorscope
  * no hover effects on mobile
  * Revert "add a "preview" file definition for widgetexplorer"
  * slightly translucent when disabled
  * Add missing component: RoundButton
  * add a "preview" file definition for widgetexplorer
  * Remove this line
  * Avoid potential detach on range-loops with non-const Qt containers
  * Combine display OSD icon files and move to plasma icon theme (kde#395714)
  * same fixes as Slider
  * make use of hint-handle-size
  * align the groove in a better way
  * respect color group
  * don't corrupt the active part
  * [Plasma Components 3 Slider] Fix implicit size of handle
  * [Plasma Components 3 ComboBox] Switch entries with mouse wheel
  * Support button icons when present
  * stubs, warning--
  * [Calendar] Wrap day name index around (kde#390330)
  * Fix minor typos
  * [DialogShadows] Use 0 offset for disabled borders on Wayland
- Dropped patches, now upstream:
  * 0001-Support-button-icons-when-present.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1539691200">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1541937600">- Update to 5.52.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.52.0.php
- Changes since 5.51.0:
  * Remove unused variables
  * revert icons scaling on mobile
  * Fix minor EBN issues and typos
  * Support mnemonic labels
  * Remove PLASMA_NO_KIO option
  * proper color group for icons
  * center text when no icon
  * smaller dots
  * Reduce double and triple lookups to the frames hash
  * No point in including an empty foreach when NDEBUG isn't defined
  * Properly look for fallback themes</changelog>
  <changelog author="lbeltrame@kde.org" date="1544356800">- Update to 5.53.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.53.0.php
- Changes since 5.52.0:
  * Use isEmpty()
  * Remove virtual keyword
  * same behavior as qwidgets comboboxes
  * feature parity of Menu with the Desktop style
  * default values for tooltips
  * make sure flickables are pixelaligned
  * Simplify reference counting of FrameData
  * less spacing
  * ASAN: Fix memory leak in CalendarPlugin
  * ASAN: Fix memory leak in DataSource
  * ASAN: Fix memory leak in Corona
  * ASAN: Fix leak in AppletQuickItem
  * Remove ComponentInstaller
  * Qt 5.9 is now the minimum required version
  * Add back (accidentally?) deleted line in CMakeLists.txt
  * 100% consistency with kirigami heading sizing
  * more homogeneous look with Kirigami headings
  * install the processed version of private imports
  * Mobile text selection controls
  * Update breeze-light and breeze-dark colorschemes
  * Make sure private header fields are initialized
  * Summary: After this commit https://cgit.kde.org/plasma-framework.git/commit/?id=9f08668147d2e99f8b5069ff50d5c54e672a87af the iconitemtest started to fail, the reason was just a typo in the initial "if" so it does exactly the same in the "if" and the "else" part. So let's correct it to do what it is suposed to do.
  * remove unneeded include
  * Remove qt include prefix</changelog>
  <changelog author="lbeltrame@kde.org" date="1547467200">- Update to 5.54.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.54.0.php
- Changes since 5.53.0:
  * [Calendar] Expose firstDayOfWeek in MonthView
  * Add override
  * Add preferences-system-bluetooth-battery to preferences.svgz
  * Fix comparison between signed and unsigned integer warning
  * Fix unused parameter warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1549800000">- Update to 5.55.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.55.0.php
- Changes since 5.54.0:
  * Use more https in links (&amp; update a few urls)
  * [Wallpaper templates] Add missing Comment= entry to desktop file
  * Remove explicit use of ECM_KDE_MODULE_DIR, part of ECM_MODULE_PATH
  * [Plasma Theme] Use new connect syntax
  * Share Plasma::Theme instances between multiple ColorScope
  * Make the clock svg's shadows more logically correct and visually appropriate
  * [frameworks] Do not use light font styles for headings (1/3) (kde#402730)
  * [Dialog] Don't alter mainItem's visibility
  * Reset parentItem when mainItem changes
  * Remove Qt version check</changelog>
  <changelog author="alarrosa@suse.com" date="1550232000">- Add 0001-Revert-Remove-Qt-version-check.patch to revert the commit
  that removes support for Qt &lt; 5.10
- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="wbauer@tmo.at" date="1559044800">- Add 0001-Fix-MobileTextActionsToolBar.qml-with-Qt-5.9.patch to
  fix another incompatibility with Qt 5.9 (boo#1136473)</changelog>
</package>
<package pkgid="bdafff739ee0b7788fd3d0261e145826c01149a256e6d7c4ef473278c89f485a" name="plymouth" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="3f320e76034324dc749132717265bc519ee9544614b91d0f050125e331060db3" name="plymouth" arch="src">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="77fb37deb0bddbf365a7ad7516f7886de32ce11c87a7f71606bca95317eab284" name="plymouth" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="b505f7385fee699a0aba16293db4a0c67aae0075c07d04c27e5dbf4f660ee33b" name="plymouth-devel" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="51c1e54e194d9efaa349f4ed6cead63ff0378b625a052664ad018d57a1f280c7" name="plymouth-devel" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="7aa43ce19e0680849515b3c093ea8abfaf8cc616eebe193f2f731e77c8457c0a" name="plymouth-dracut" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d740a3686e771c013027c5434dbe9ec5a881e9ce8a58837a7fe7420c7713699b" name="plymouth-dracut" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="5a1274c013e6d3ef61e2b83d405dd49c24b83a07c71937dcc316fe8cb4b6e7af" name="plymouth-plugin-fade-throbber" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="8c73644ab600cd2fee268732c3ed0709e78afa1b9ba7c27dac1266e1ca6f8fbf" name="plymouth-plugin-fade-throbber" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="71a6509e762ae3b202a4e608657e2b88a2865a15c367b3c6c1f6d3f9fd49a65d" name="plymouth-plugin-label" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="8a99a1ae16bce70477be34205ea1e795d05f27d96eb325e0fb0f69a29d366923" name="plymouth-plugin-label" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="0879ab07be88140735523bab48897d15c46de278050589aad466880a8d4f75c1" name="plymouth-plugin-label-ft" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d0ce3595e51b5620aede3d0294447a632b0a2803ef05d89a54b30c0b72c15e44" name="plymouth-plugin-label-ft" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d7a3acefc3c7912f9a61b3c8d6b93dbc488185b310e42bfb1b4b22369317b796" name="plymouth-plugin-script" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="5139808a4ae27b8f9f699aa6bf5f89fd2d5f8028a9c2eeb7b548fcddc1c259f7" name="plymouth-plugin-script" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="1be7fc39507b19804d82d4095daf07d8b47dd96794fb791f871bc81768a68f09" name="plymouth-plugin-space-flares" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="1a76a46fa09d248466e97da759f0986d8779a722578b7b9f46d30d96363ef05f" name="plymouth-plugin-space-flares" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="7f5fb22f0aa850e7892092ed370650248664b42fa7a0a005cbe49e09818fb125" name="plymouth-plugin-throbgress" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="dc9ac3f99324e9223cecf6fda986e17335af25e82706039f2b42c69bf5b5b821" name="plymouth-plugin-throbgress" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="b7ede264c3c9d796beba0042939ea6d240b00ac928c9136a7a8b2723d3e3eab7" name="plymouth-plugin-tribar" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="21fc6aa1fd531efd35d3725a7971f292be120a020f474d9e5f04807b9c222e65" name="plymouth-plugin-tribar" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="1e297bf18d49e5b72ab04f985ecf1bbe7308ff4a73d96432eb71dca34c8f6c8e" name="plymouth-plugin-two-step" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="f74d57c3380453b43391e4daba37876ad53b82ea2ad23dda6754246f27c1f261" name="plymouth-plugin-two-step" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="e89e14d201c416ac96b08e45d52e45827901bd60618b5e0362fa03694520eb26" name="plymouth-scripts" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="954663f1065164e93e3ac73a548574abd46d13382d8862554738ddc928a5d4ea" name="plymouth-scripts" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="89aab4c58b36a566cb0e81fc2e50ce39a189a5073f5b8edd1fc21d3df31c4838" name="plymouth-theme-bgrt" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d3da6b155c58aa973f7ada68bb94a429bcae24b4088c13d2cf45ae1b8ceb2101" name="plymouth-theme-fade-in" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="e8f37b419947c51a1202d675d2ab05aff46869769614006ee8e9e36d1796b154" name="plymouth-theme-script" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="1ff2c1f44a6c68578a099757cb6ca771a080d39044249a51113c0444aaa8387e" name="plymouth-theme-solar" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d84f1a4a821ed4d22a9b320edf842eaf2ea6e2eaa2b4b9aad55b9ea41f560c6d" name="plymouth-theme-spinfinity" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="a8378af823f5b6120a2826818cfccf400b79f16bd0eb693e52a5ae1f48d5f24b" name="plymouth-theme-spinner" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="d29c9487e795e956d08ed90d31dd8948dfeb3ac2a1da6eb0a1415334d66934df" name="plymouth-theme-tribar" arch="noarch">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="ba5842e315a7321e808ee40ebd0311ebbb949f4db5a0e2f9460ab68aa1850edb" name="plymouth-x11-renderer" arch="i586">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="42e558d5c197c93ef765b92fd606991813c1246004286127868d94319088d7bc" name="plymouth-x11-renderer" arch="x86_64">
  <version epoch="0" ver="0.9.4+git20190304.ed9f201" rel="lp151.2.3.1"/>
  <changelog author="qzhao@suse.com" date="1511956800">- Drop stop-graphical.patch: There are no conflicting these days,
  obsolete this patch to enable auto switch to TTY when display
  server not exist (boo#1066510).</changelog>
  <changelog author="zaitor@opensuse.org" date="1512388800">- Update to version 0.9.3+git20171130.fa66a5b:
  * INSTALL: Fix a spelling error in the command example
  * populate-initrd: handle themes with subdirs
  * device-manager: fall back to text mode if graphical devices
    fail
  * scripts: Use &gt;&amp;2 instead of /dev/stderr
  * terminal: add include for sysmacros.h
  * configure: bump to 0.9.4
  * terminal-session: don't delete boot.log
  * Revert "Make boot.log world readable by default"
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Update to version 0.9.3+git20171220.6e9e95d:
  * device-manager: drop superfluous
    create_pixel_displays_for_renderer call
  * x11: don't call gdk_display_get_name before gtk_init</changelog>
  <changelog author="oholecek@suse.com" date="1523448000">- Modify 0001-Add-label-ft-plugin.patch to fix problems with
  multiline text (bsc#1083695)
  * to prevent infinite loop newline characters need to be skipped
- Use %license instead of %doc (bsc#1082318)</changelog>
  <changelog author="qzhao@suse.com" date="1533384000">- Drop plymouth-fix-window-size: The use of the smallest screen
  size is deliberate (boo#804607 bsc#894051).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Update to version 0.9.3+git20180807.7663b0c:
  * systemd-units: Add "ConditionVirtualization=!container"
  * README: add link to Code of Conduct
  * two-step: add unhandled splash mode case to switch
  * main: fix build
  * Fix miscellaneous compiler warnings
  * configure: Pass -Wno-cast-function-type if available
  * main: Fix getting detailed logs from systemd
  * main: Show details when ESC is pressed during splash_delay
  * drm: Remove unnecessary reset_scan_out_buffer_if_needed() call
    from ply_renderer_head_map()
  * main: Only activate renderers if the splash uses pixel-displays
- Switch to new gitlab home in _service.
- Refresh patches with quilt.
- Use autosetup macro.</changelog>
  <changelog author="qzhao@suse.com" date="1535457600">- Update to version 0.9.3+git20180827.0a66272:
  ensure tty is closed on deactivate
  If plymouth doesn't get explicitly "activated" then when
  GDM tries to deactivate it, the deactivation request is
  a noop.
  One aspect of being active, though is having ownership and
  control of the terminal.  This happens immediately, even
  before a splash is shown.
  The `deactivate` request needs to relinguish such control,
  unconditionally, since some display server is about to use
  the tty.
- Update patch name base on quilt standerd
  Remove only_use_fb_for_cirrus_bochs.patch
  Add plymouth-only_use_fb_for_cirrus_bochs.patch
  Remove 0001-Some-greenish-openSUSE-colors.patch
  Add plymouth-some-greenish-openSUSE-colors.patch</changelog>
  <changelog author="qzhao@suse.com" date="1539864000">- Update to version 0.9.3+git20180827.0a66272:
  * boot-server: free the argument and triggers
  * event-loop: fix leak in error path
  * script: fix various memory leaks
  * key-file: ply_key_file_get_value returns duplicated memory, fix
    memory leaks.
  * event-loop: fix leak in error path
  * boot-splash: fix memory leak in error path
  * populate-initrd: drop unused local variable</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Make sure plymouthd stops throbber animation at the first
    opportunity after receiving quit command, instead of looping
    multiple times. (boo#1110199)</changelog>
  <changelog author="qzhao@suse.com" date="1540987200">- Update to version 0.9.3+git20181031.025ce59:
  drm: use preferred mode for outputs
  drm: Refactor ply_renderer_connector_get_rotation
  drm: Reset LUT/gamma table before the first drmModeSetCrtc call
  libply: Move kernel commandline parsing functions to libply/ply-utils
  throbber: Don't skip last frame when waiting for end.
- Drop plymouth-throbber-Don-t-skip-last-frame-when-waiting-for-end.patch
  * Upstream has already accept Michal's modification.</changelog>
  <changelog author="qzhao@suse.com" date="1541505600">- Update to version 0.9.4+git20181105.f898586:
  bump to 0.9.4</changelog>
  <changelog author="qzhao@suse.com" date="1542024000">- Update to version 0.9.4+git20181111.118c5ca:
  Modify systemd-units: Add "ConditionVirtualization=!container" in
  all plymouth-*.service, also systemd-ask-password-plymouth.path.</changelog>
  <changelog author="qzhao@suse.com" date="1542974400">- Update to version 0.9.4+git20181122.aaa140b:
  Add a separator between different boot logs
  Fix race causing undesired creation of non-gfx devs
  Fix animation not starting on later added heads</changelog>
  <changelog author="qzhao@suse.com" date="1543492800">- Update to version 0.9.4+git20181129.a7ec3e6:
  * Add new BGRT theme, using the firmware boot splash as background
  * two-step: bgrt: Deal with quirky firmwares, Add ACPI BGRT
  extension support, Speed up background-tile drawing on HiDPI
  screens, Use a pixel-buffer instead of an image for the view's
  background
  * ply-pixel-buffer: Add ply_pixel_buffer_rotate_upright helper,
  Add ply_pixel_buffer_get/set_device_rotation helpers, Fix marking
  buffers as opaque when doing a solid fill, Fix fill_with_buffer
  fastpath when device_scale != 1.</changelog>
  <changelog author="qzhao@suse.com" date="1544011200">- Update to version 0.9.4+git20181204.0cd0613:
  * drm: Pick a controller for unconfigured connectors
  * drm: Drop crtcs for clones for which we've picked different
    modes
  * drm: More connector enumeration refactoring
  * drm: Store tiled and rotation in ply_output_t
  * drm: Refactor create_heads_for_active_connectors
  * drm: Directly store the mode instead of the mode_index
  * drm: Drop unused encoder_id</changelog>
  <changelog author="qzhao@suse.com" date="1544616000">- Update to version 0.9.4+git20181209.f7d5bb1:
  * ply-keyboard: Fix compiler warning
  * When a renderer goes away on a udev remove event, free
    keyboards associated with the renderer, before freeing the
    renderer.
  * device-manager: free keyboards when deactivating a renderer
  * keyboard: add helper to get the keyboard's renderer, if
    applicable.</changelog>
  <changelog author="qzhao@suse.com" date="1546430400">- Update to version 0.9.4+git20181219.c8f1256:
  * two-step: Use plymouth_strtod
    Use the locale agnostic plymouth_strtod helper which always
    uses a "." as decimal seperator. This fixes the various
    Alignment options not working with some locales.</changelog>
  <changelog author="qzhao@suse.com" date="1552392000">- Update to version 0.9.4+git20181219.c8f1256:
  * ply-pixel-buffer: Fix right and bottom edge rendering of
    scaled buffers.
  * Add support for translating the user visible strings in some
    themes
  * Prefix Title and Subtitle theme config keywords with an
    underscore
  * Add new reboot and system-upgrade modes
  * main: Remove private ply_mode_t
  * two-step: Make ProgressBarShowPercentComplete a per mode
    setting
  * plymouthd.defaults: Change default ShowDelay to 0
  * ply-boot-splash: Do not add ply_boot_splash_update_progress
    timeout multiple times
  * logging: Minor log-message fixes.
    Improve logging format.
  * themes: Update spinner and bgrt theme offline updates mode
  * two-step: Add a per mode setting to suppress messages.
    Add progress-bar support.
    Add MessageBelowAnimation option.
    Add per mode settings.
    Drop background_is_bgrt view_t member
  * ply-progress-bar: Allow caller to specify the widgets width and
    height.
    Allow choosing fore- and back-ground color.
    Redraw on percentage update.
  * boot-server: fix type confusion when allocating connection object
  * ply-device-manager: Handle change events for monitor hotplugging.
    Consume all events in one go.
  * drm: Stop limiting preferred-mode picking to UEFI systems.
    Reset mode on display-port connected outputs with a bad
    link-status.
    Implement handle_change_event.
    Ensure heads are mapped before flushing them.
    Allow calling create_heads_for_active_connectors multiple
    times.
    Allow calling ply_renderer_head_add_connector with existing
    connector_id.
    Limit backend-&gt;resources lifetime to within query_device.
    Store and keep all the outputs in the backend.
    Add get_output_info helper function
    Stop storing a pointer to drmModeConnector in ply_output_t
    Stop keeing a drmModeConnector instance around.
    Refactor ply_renderer_head_add_connector and
    ply_renderer_head_new
- Rebase 0002-Install-label-ft-plugin-into-initrd-if-available.patch</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1553428800">- Fix theme-bgrt dependencies
  (based on plugin-two-step with images from theme-spinner)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560513600">- Add dependency to dracut for plymouth-scripts(bnc#1138248).</changelog>
</package>
<package pkgid="5bf8428f322da064e8d8bdcb0b16b36db05ddf8eeec06977c7a0923922a06927" name="postfix" arch="i586">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="ea0c9977f6ac50a9b6b4f07f31e1266cd70beb540ba6c2453e72be223fa93ef5" name="postfix" arch="src">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="52ef36e1f0e7dd8bfa20d221bf71ef39588e65cfce8b7237e327014b73123465" name="postfix" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="9d52c33a6c081e2741b131f51c1ab48481ee72938353bed85597651b27910e8e" name="postfix-devel" arch="i586">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="e3fc96bab62dae89329c0a070fe7c7a2a2a02ce12077744eb80dfe957f5a4afc" name="postfix-devel" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="eda6d466dc5543d7ec56154d33a44edfda3cfdcea0eefb92327f843d58a4a5f9" name="postfix-doc" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="adae583aec191334e82e0c4f0bd4c1987b3b16b700caaec89544d18862fedd4e" name="postfix-lmdb" arch="i586">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="4f437ce98440e66200eef0c06fb1a49ea14d84482581b4967c7274cf6e6f62e0" name="postfix-lmdb" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="72ec76c77fa24f58665cc5a7ce8619897dfc58ff33b47248836466be5655781e" name="postfix-mysql" arch="i586">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="5b47393518edbe7cc889de7edb08d902e18aa5c1a524a5a9a4513a20801e75f1" name="postfix-mysql" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="ee49f14e504a5a4e538b2757b84234c3f308384e551f13ab5ce70656dcf697c9" name="postfix-postgresql" arch="i586">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="71565cb1a6897ac80f345156131f7d23357bf4245439b663c5779d5bcc5ab283" name="postfix-postgresql" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp151.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1547985600">- bsc#1120110 L3: Running postfix set-permissions gives error
  that is cannot access postfix-ldap.so
  o Adapt the proposed patch in postfix-files in postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1554206400">- bsc#1120757 L3: File Permissions-&gt;Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch</changelog>
</package>
<package pkgid="20bc46d1f3d5d5e98704cc2379354f15f35314acd581ada42b57085e1428ea40" name="postgresql10" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="342082b32919d9f57225f5cbc5ec68b1081d639407acaa439a9220d221535992" name="postgresql10" arch="src">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="fe547fc1e40f958c1dae60f2ca1f78e31de41c18b88e49fa4b1fcadcce4e91cc" name="postgresql10" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="08dd14b542d03f2f751b384836d20600bac39285b27a580e9ff17817d7e11880" name="postgresql10-contrib" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="6247ce3b1f1da5a246a18254f91d32e51795e588bf2a52a757be554991d4ea1d" name="postgresql10-contrib" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="331f48f14e48a00871ce8d2f984df3ff207545f7c26c747df94e30174592fe84" name="postgresql10-devel" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="b2c5334624eef8350cec2382eda054ff9bccac13653af38dddc36fb7d6ecb602" name="postgresql10-devel" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="a48bb6ec723b0cc7017ed8216c4865108ea9ac19b501498457f2205aa72a9b8a" name="postgresql10-docs" arch="noarch">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="feb7e3afccff679e91916a6a12e88b9443c67bffd09cdbe7c2940de7f606c0a5" name="postgresql10-plperl" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="088daad3d55b576d55c5816b7d97f039ea5992c4523d84a904166d87aa8b0587" name="postgresql10-plperl" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="46c74dbdb0e398bf6d22f41a27019d9007b0463d328e054284e9a7a1852609d9" name="postgresql10-plpython" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="2dff318152407c5db32f5d3b6271df6c3b112880d26326b689379eec6040d659" name="postgresql10-plpython" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="3ce5861a9a87c6a822584a80e777d5a9ceeb9d39cce85370737c80566f569fd5" name="postgresql10-pltcl" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="d5fe6203e31e15c6bbb147655221b97e47c46c807c67961d1aebce2df598ef95" name="postgresql10-pltcl" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="a2afe3a8d109758003f92bca1940eb88d7603a459f2a56c7dbccf77dd576bfdb" name="postgresql10-server" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="3cbcfd7dc2b533c54a78446917fff5d17e80e317ea89d210be7351108fcf95b1" name="postgresql10-server" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="8b6a86a290a526de958ca7a1a60de85403faa916c55ab79efbd45dd29a29bb58" name="postgresql10-test" arch="i586">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="d57ada530eb701b67ddca6b5a384185de6e97b71c65edd652ba5adc051dc0339" name="postgresql10-test" arch="x86_64">
  <version epoch="0" ver="10.9" rel="lp151.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1541505600">- Update to 10.6:
  https://www.postgresql.org/docs/current/static/release-10-6.html
  * CVE-2018-16850, bsc#1114837: Improper quoting of transition
    table names when pg_dump emits CREATE TRIGGER can cause
    privilege escalation
  * Numerous bug fixes, see the release notes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558008000">- Update to 10.8:
  * https://www.postgresql.org/docs/10/release-10-8.html
  * https://www.postgresql.org/about/news/1939/
  * CVE-2019-10130, bsc#1134689: Prevent row-level security
    policies from being bypassed via selectivity estimators.
- Update to 10.7:
  * https://www.postgresql.org/docs/10/release-10-7.html
  * https://www.postgresql.org/about/news/1920/
  * By default, panic instead of retrying after fsync() failure,
    to avoid possible data corruption.
  * Ensure that NOT NULL constraints of a partitioned table are
    honored within its partitions.
  * Numerous other bug fixes.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1560859200">- Update to 10.9:
  * https://www.postgresql.org/docs/10/release-10-9.html
  * CVE-2019-10164, bsc#1138034: Fix buffer-overflow hazards in
    SCRAM verifier parsing.
  * Numerous other bug fixes.</changelog>
</package>
<package pkgid="9225b04e94d55d9b75c6f2923bd816cae8041baea5cee06d2a8b27cb7044d7d6" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375099200">- Improve systemd service file
- use upstream tmpfiles.d file. related to [bnc#811793]
- Use /run instead of /var/run</changelog>
  <changelog author="chris@computersalat.de" date="1380801600">- update to 1.3.4d
  * Fixed broken build when using --disable-ipv6 configure option
  * Fixed mod_sql "SQLAuthType Backend" MySQL issues
- fix for bnc#843444 (CVE-2013-4359)
  * http://bugs.proftpd.org/show_bug.cgi?id=3973
  * add proftpd-sftp-kbdint-max-responses-bug3973.patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#844183
  * proftpd fails to start due to missing /run/proftpd
- add own tmpfiles.d file
  * proftpd.tmpfile</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395748800">- Remove tcpd-devel from buildRequires and mod_wrap.
  support for tcp_wrappers style /etc/hosts.* is provided
  by mod_wrap2_file instead, the latter does not require tcpd.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409572800">- proftpd 1.3.4e:
  Multiple other backported fix from the 1.3.5 branch.
  See http://www.proftpd.org/docs/NEWS-1.3.4e
- The fix for the mod_sftp/mod_sftp_pam memory allocation
  (CVE-2013-4359) contained in this release was previously patched
  into the package.
- adjust proftpd-no_BuildDate.patch for context changes
- remove proftpd-sftp-kbdint-max-responses-bug3973.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409572801">- ProFTPD 1.3.5
  * Added support for SHA-256, SHA-512 password hashes to the ftpasswd tool
  * New Modules
    mod_geoip, mod_log_forensic, mod_rlimit, mod_snmp, mod_dnsbl
  * mod_sftp now supports ECC, ECDSA, ECDH
  * Improved FIPS support in mod_sftp.
  * mod_sftp module now honors the MaxStoreFileSize directive.
  * Many new and changed configuration directives
- update proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="1a0a10e217e7821c8ddb570d57bc70d3c5f527c7fe9adeed0a3c445b5943d0c9" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="a7d85d1ca9b74c12141b1ad275df2471ed2b7b7dbc4669c41bb7bc20aa38fbad" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="6de651481f982a43bd8e9fbf87f768889caea823917b74ec123bae583ffd0770" name="proftpd-doc" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="9122173fe53ccb7f7c2e3eebc262410f435b1493d3d1a97bddd49f54127dbfc1" name="proftpd-lang" arch="noarch">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="4860af42c908e68afa248f0995214b74191f24d9ceeab73038337d06c020e8f6" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="aec8a9abd447833c527e16f4e31c01a3b6f280e06599bfa56f65fc129dc1b091" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="7f9287fd20b4210985acd655e3c226ef62dec655f0b3d148c2be3218d6e1b2c1" name="proftpd-pgsql" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="206be0c52918640b243f5b6d37162fc3b276c16480edf35854d91231bb5cea16" name="proftpd-radius" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="daabb953de524596add351e55530e8418ef08991fdd63beba27c7875d433741b" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.5e" rel="lp151.3.3.1"/>
  <changelog author="chris@computersalat.de" date="1433073600">- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -&gt; 0440</changelog>
  <changelog author="chris@computersalat.de" date="1462708800">- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462708801">- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file</changelog>
  <changelog author="chris@computersalat.de" date="1472299200">- fix systemd vs SysVinit</changelog>
  <changelog author="chris@computersalat.de" date="1484481600">- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for &lt;IfUser&gt;/&lt;IfGroup&gt;
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1484654400">- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.</changelog>
  <changelog author="chris@computersalat.de" date="1486296000">- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1488801600">- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.</changelog>
  <changelog author="chris@computersalat.de" date="1491566400">- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
</package>
<package pkgid="3e654056c804f1b17c7df0cdfd75e5a94c04d87bbc928adb3ce35587a1221be8" name="pure-ftpd" arch="src">
  <version epoch="0" ver="1.0.47" rel="lp151.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1346241600">- systemd: Do not fork in the background</changelog>
  <changelog author="mvyskocil@suse.cz" date="1346241601">- add gpg signature file for easier verification</changelog>
  <changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
  <changelog author="mvyskocil@suse.com" date="1358942400">- fix bnc#789833: pure-ftpd login failes
  * pure-ftpd-1.0.36-cap-audit-control.patch
- remove oes related patches have never used at openSUSE
  * pure-ftpd-1.0.20-oes_remote_server.patch
  * pure-ftpd-1.0.22-oes-bugfix-534424.patch
- change old PreReq to Requires(pre)
- add version to pureftpd symbol</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1397044800">- Remove all init scripts but keep the rc link working.</changelog>
  <changelog author="tchvatal@suse.com" date="1433505600">- Remove gpg/keyring, not provided now by upstream
- Cleanup with spec-cleaner
- Update to latest upstream 1.0.39:
  * Explicitly include openssl/ec.h for OpenSSL 0.9.8 (CentOS 5)
  * Retry if SSL_shutdown() returns -1 and SSL_ERROR_WANT_(READ|WRITE)
  * The default cipher suite is now
    ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SH
  * TLS forward secrecy support was added. DH parameters are loaded from
    TLS_DHPARAMS_FILE, if present. ECDH is also supported - Default curve
    is prime256v1 (TLS_DEFAULT_ECDH_CURVE). The best curve is automatically
    selected when using LibreSSL.
  * scrypt hashed passwords can be used in the MySQL, PostgreSQL and
    LDAP backends.
  * The -C: prefix can be added to the cipher suite in order to make valid
    client certificates mandatory. This is no longer a compile-time option.
  * The Clear Command Channel (CCC) command is now supported.
  * pure-config.py is compatible with Python 3.
  * SSL (v2, v3) is refused by default.
  * The PureDB backend supports the scrypt function in order to hash
    passwords. This is the preferred algorithm, but requires the presence
    of libsodium.
  * DES-hashed passwords are not supported any more.
  * LDAP uid and gid values can over overridden in the LDAP configuration file.
  * RC4 was killed.
- Refreshed patches:
  * pure-ftpd-1.0.20_config.patch
  * pure-ftpd-1.0.20_doc.patch
  * pure-ftpd-1.0.20_ftpwho_path.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1433505601">- Reenable sle11 builds I need for testing.</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.0.42:
  - Compilation fix for OpenBSD and Bitrig when Pure-FTPd is not
    compiled with libsodium.
  - The connection is now dropped if HTTP commands are received.
  - LDAP force_default_gid and force_default_uid now work as documented.
  - The ONLY_ACCEPT_REUSED_SSL_SESSIONS switch (introduced in Pure-FTPd
    1.0.22 circa 2009, but disabled back then due to client compatibility
    concerns) is now on by default, except in broken clients compatibility mode.
  - libmariadb is looked for in addition to libmysqlclient
  - MySQL: my_make_scrambled_password() is not always an exported
    symbol any more, so pure-ftpd now ships a reimplementation.
  - openssl/ec.h is not available on some Linux distributions that
    disable EC in OpenSSL. This is being tested by autoconf.
  - New command-line switch: -2/--certfile= to set the path to the
    certificate file when using TLS.
  - Support for TCP_FASTOPEN added on Linux
  - The LDAP configuration file didn't allow a default gid without also
    defining a default uid. This is no longer the case.
  - OpenBSD's glob() left the glob_t structure uninitialized if the
    pattern was larger than PATH_MAX, causing globfree() to free() an
    unwanted pointer. The bug was introduced in Pure-FTPd 1.0.34.
- Refresh patch:
  * pure-ftpd-1.0.20_config.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1452945600">- Add gpg signature</changelog>
  <changelog author="tchvatal@suse.com" date="1460635200">- Add -fvisibility=hidden for bnc#971980</changelog>
  <changelog author="wr@rosenauer.org" date="1462881600">- fix systemd unit file so the service actually starts (boo#872430)</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Kill omc xml file useless nowdays
- Version update to 1.0.43:
  * -J switch has been fixed
  * openBSD compat changes
  * Passwords are now hashed using Argon2i, default for puredb accounts now</changelog>
  <changelog author="psimons@suse.com" date="1495195200">- pure-ftpd-apparmor.patch: Add an AppArmor profile (based on the
  one from SLE11).
- The Factory version of pure-ftp will replace the older package in
  SLE-11 as per fate#321125. That update brings the following
  changes:
  * These patches have been updated and renamed in the process:
  * pure-ftpd-1.0.22-default_tcp_sedrcv_buffer_size.patch is now
    in pure-ftpd-1.0.32-default_tcp_sedrcv_buffer_size.patch.
  * pure-ftpd-1.0.21-portrange.patch is now in
    pure-ftpd-1.0.32-portrange.patch.
  * pure-ftpd-1.0.32-cap-audit-write.patch is now in
    pure-ftpd-1.0.36-cap-audit-control.patch.
  * These patches are obsolete now and have been removed:
  * 0001-Act-like-a-server-even-in-TLS-mode-when-in-active-mo.patch
  * 0002-Init-a-TLS-data-session-after-having-sent-the-go-ahe.patch
  * 0003-add-opt_a-to-donlist.patch
  * 0004-support-stat-over-tls.patch
  * 0005-speedup-TLS-listing.patch
  * pure-ftpd-1.0.20_config_minuid.patch
  * pure-ftpd-1.0.22-fix-listing-if-directory-has-white-space-in-it.patch
  * pure-ftpd-1.0.22-flush-cmd-after-tls.patch
  * pure-ftpd-1.0.22-oes-bugfix-1.patch
  * pure-ftpd-1.0.22-oes-bugfix-2.patch
  * pure-ftpd-1.0.22-oes-bugfix.patch
  * pure-ftpd-1.0.22-oes-disable-ascii.patch
  * pure-ftpd-1.0.22-oes_remote_server.patch
  * pure-ftpd-1.0.22-wait-on-tls-handshake.patch
  * pure-ftpd-allow-crypto-settings.patch
  * pure-ftpd-remove-gpl-code.patch</changelog>
  <changelog author="psimons@suse.com" date="1495886400">- Fix build on SUSE:SLE-11, which doesn't define the RPM variable
  %{_initddir}, so we have to use %{_sysconfdir}/init.d instead.</changelog>
  <changelog author="psimons@suse.com" date="1497441600">- Fix broken pure-ftpd.init script. We cannot use startproc to run
  /usr/sbin/pure-config.pl, because the utility assumes that the
  name of that executable matches the name of the started process,
  which it does not in our case. Furthermore, the start script will
  write a status message to stdout, so we don't have to do it in
  the init script. [bsc#1042690]</changelog>
  <changelog author="tchvatal@suse.com" date="1497528000">- Version update to 1.0.46:
  * Fix build with openssl-1.1
  * The Perl and Python wrappers are gone
  * TLS v1.0 sessions are now refused
  * Unmaintained contributions have been removed
  * File globbing could take up to `GLOB_TIMEOUT` seconds
    (17 seconds by default) when matching some patterns, no matter what the
    configured recursion level was.
- Refresh patches:
  * pure-ftpd-1.0.20_config.patch
  * pure-ftpd-1.0.20_doc.patch
- Drop patch pure-ftpd-1.0.32-portrange.patch
  * The upstream no longer provide pure-config.pl/py scripts for launching
  * This also means the initscript and service were tweaked to reflect this
- Disable xinetd on systemd having versions where we can stick to socket
  based services instead
  * By default it does not make sense to have this service socket activated
    tho so leave it to user to provide this</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Version update to 1.0.47:
  * If TLS was only enabled on the control channel (-Y 1), the STAT
    command would send its output as other directory listing
    commands, breaking the TLS stream. This has been fixed.
  * The system user ?_ftp? can be used as an alternative to ?ftp?
    for anonymous sessions.
  * Compatibility with libsodium &gt; 1.0.12 was added (including
    minimal mode).
  * The prefix for Argon2-hashed passwords in LDAP has been changed
    to ?{argon2}? (from ?{argon2i}?). Ditto for MySQL and
    PostgreSQL: the authentication method is now called ?argon2?
    instead of ?argon2i?, and includes both Argon2i and Argon2id.
- use https for main site and source download
- switch to bz2 tarball (smaller)</changelog>
  <changelog author="psimons@suse.com" date="1551441600">- Apply "pure-ftpd-malloc-limit.patch" to add a configuration
  option that sets the process memory limit used by "ls" for
  globbing. The value can be specified as optional third argument
  to "-L" (or LimitRecursion in config file). Because it's
  optional, the old configuration files will still work without
  change with new binaries and update will be smooth. This change
  allows sites that store an extremely large set of files inside a
  single directory to tune their installation so that the "ls"
  command in that directory will succeed without exceeding the ftpd
  process memory limit. [bsc#1119187]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554811200">- Add the missing build dependency for Tumbleweed.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1560859200">- Add missing run-time dependency on system-user-ftp to ensure that
  user exits. [boo#1136997]
- Processed the spec file with spec-cleaner version 1.1.3.</changelog>
</package>
<package pkgid="ea0f80a88b2780fc657fbddf8d172ce34a1a5828dcf11061705b5c4b41fb7fc2" name="pure-ftpd" arch="x86_64">
  <version epoch="0" ver="1.0.47" rel="lp151.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1433505600">- Remove gpg/keyring, not provided now by upstream
- Cleanup with spec-cleaner
- Update to latest upstream 1.0.39:
  * Explicitly include openssl/ec.h for OpenSSL 0.9.8 (CentOS 5)
  * Retry if SSL_shutdown() returns -1 and SSL_ERROR_WANT_(READ|WRITE)
  * The default cipher suite is now
    ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SH
  * TLS forward secrecy support was added. DH parameters are loaded from
    TLS_DHPARAMS_FILE, if present. ECDH is also supported - Default curve
    is prime256v1 (TLS_DEFAULT_ECDH_CURVE). The best curve is automatically
    selected when using LibreSSL.
  * scrypt hashed passwords can be used in the MySQL, PostgreSQL and
    LDAP backends.
  * The -C: prefix can be added to the cipher suite in order to make valid
    client certificates mandatory. This is no longer a compile-time option.
  * The Clear Command Channel (CCC) command is now supported.
  * pure-config.py is compatible with Python 3.
  * SSL (v2, v3) is refused by default.
  * The PureDB backend supports the scrypt function in order to hash
    passwords. This is the preferred algorithm, but requires the presence
    of libsodium.
  * DES-hashed passwords are not supported any more.
  * LDAP uid and gid values can over overridden in the LDAP configuration file.
  * RC4 was killed.
- Refreshed patches:
  * pure-ftpd-1.0.20_config.patch
  * pure-ftpd-1.0.20_doc.patch
  * pure-ftpd-1.0.20_ftpwho_path.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1433505601">- Reenable sle11 builds I need for testing.</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.0.42:
  - Compilation fix for OpenBSD and Bitrig when Pure-FTPd is not
    compiled with libsodium.
  - The connection is now dropped if HTTP commands are received.
  - LDAP force_default_gid and force_default_uid now work as documented.
  - The ONLY_ACCEPT_REUSED_SSL_SESSIONS switch (introduced in Pure-FTPd
    1.0.22 circa 2009, but disabled back then due to client compatibility
    concerns) is now on by default, except in broken clients compatibility mode.
  - libmariadb is looked for in addition to libmysqlclient
  - MySQL: my_make_scrambled_password() is not always an exported
    symbol any more, so pure-ftpd now ships a reimplementation.
  - openssl/ec.h is not available on some Linux distributions that
    disable EC in OpenSSL. This is being tested by autoconf.
  - New command-line switch: -2/--certfile= to set the path to the
    certificate file when using TLS.
  - Support for TCP_FASTOPEN added on Linux
  - The LDAP configuration file didn't allow a default gid without also
    defining a default uid. This is no longer the case.
  - OpenBSD's glob() left the glob_t structure uninitialized if the
    pattern was larger than PATH_MAX, causing globfree() to free() an
    unwanted pointer. The bug was introduced in Pure-FTPd 1.0.34.
- Refresh patch:
  * pure-ftpd-1.0.20_config.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1452945600">- Add gpg signature</changelog>
  <changelog author="tchvatal@suse.com" date="1460635200">- Add -fvisibility=hidden for bnc#971980</changelog>
  <changelog author="wr@rosenauer.org" date="1462881600">- fix systemd unit file so the service actually starts (boo#872430)</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Kill omc xml file useless nowdays
- Version update to 1.0.43:
  * -J switch has been fixed
  * openBSD compat changes
  * Passwords are now hashed using Argon2i, default for puredb accounts now</changelog>
  <changelog author="psimons@suse.com" date="1495195200">- pure-ftpd-apparmor.patch: Add an AppArmor profile (based on the
  one from SLE11).
- The Factory version of pure-ftp will replace the older package in
  SLE-11 as per fate#321125. That update brings the following
  changes:
  * These patches have been updated and renamed in the process:
  * pure-ftpd-1.0.22-default_tcp_sedrcv_buffer_size.patch is now
    in pure-ftpd-1.0.32-default_tcp_sedrcv_buffer_size.patch.
  * pure-ftpd-1.0.21-portrange.patch is now in
    pure-ftpd-1.0.32-portrange.patch.
  * pure-ftpd-1.0.32-cap-audit-write.patch is now in
    pure-ftpd-1.0.36-cap-audit-control.patch.
  * These patches are obsolete now and have been removed:
  * 0001-Act-like-a-server-even-in-TLS-mode-when-in-active-mo.patch
  * 0002-Init-a-TLS-data-session-after-having-sent-the-go-ahe.patch
  * 0003-add-opt_a-to-donlist.patch
  * 0004-support-stat-over-tls.patch
  * 0005-speedup-TLS-listing.patch
  * pure-ftpd-1.0.20_config_minuid.patch
  * pure-ftpd-1.0.22-fix-listing-if-directory-has-white-space-in-it.patch
  * pure-ftpd-1.0.22-flush-cmd-after-tls.patch
  * pure-ftpd-1.0.22-oes-bugfix-1.patch
  * pure-ftpd-1.0.22-oes-bugfix-2.patch
  * pure-ftpd-1.0.22-oes-bugfix.patch
  * pure-ftpd-1.0.22-oes-disable-ascii.patch
  * pure-ftpd-1.0.22-oes_remote_server.patch
  * pure-ftpd-1.0.22-wait-on-tls-handshake.patch
  * pure-ftpd-allow-crypto-settings.patch
  * pure-ftpd-remove-gpl-code.patch</changelog>
  <changelog author="psimons@suse.com" date="1495886400">- Fix build on SUSE:SLE-11, which doesn't define the RPM variable
  %{_initddir}, so we have to use %{_sysconfdir}/init.d instead.</changelog>
  <changelog author="psimons@suse.com" date="1497441600">- Fix broken pure-ftpd.init script. We cannot use startproc to run
  /usr/sbin/pure-config.pl, because the utility assumes that the
  name of that executable matches the name of the started process,
  which it does not in our case. Furthermore, the start script will
  write a status message to stdout, so we don't have to do it in
  the init script. [bsc#1042690]</changelog>
  <changelog author="tchvatal@suse.com" date="1497528000">- Version update to 1.0.46:
  * Fix build with openssl-1.1
  * The Perl and Python wrappers are gone
  * TLS v1.0 sessions are now refused
  * Unmaintained contributions have been removed
  * File globbing could take up to `GLOB_TIMEOUT` seconds
    (17 seconds by default) when matching some patterns, no matter what the
    configured recursion level was.
- Refresh patches:
  * pure-ftpd-1.0.20_config.patch
  * pure-ftpd-1.0.20_doc.patch
- Drop patch pure-ftpd-1.0.32-portrange.patch
  * The upstream no longer provide pure-config.pl/py scripts for launching
  * This also means the initscript and service were tweaked to reflect this
- Disable xinetd on systemd having versions where we can stick to socket
  based services instead
  * By default it does not make sense to have this service socket activated
    tho so leave it to user to provide this</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Version update to 1.0.47:
  * If TLS was only enabled on the control channel (-Y 1), the STAT
    command would send its output as other directory listing
    commands, breaking the TLS stream. This has been fixed.
  * The system user ?_ftp? can be used as an alternative to ?ftp?
    for anonymous sessions.
  * Compatibility with libsodium &gt; 1.0.12 was added (including
    minimal mode).
  * The prefix for Argon2-hashed passwords in LDAP has been changed
    to ?{argon2}? (from ?{argon2i}?). Ditto for MySQL and
    PostgreSQL: the authentication method is now called ?argon2?
    instead of ?argon2i?, and includes both Argon2i and Argon2id.
- use https for main site and source download
- switch to bz2 tarball (smaller)</changelog>
  <changelog author="psimons@suse.com" date="1551441600">- Apply "pure-ftpd-malloc-limit.patch" to add a configuration
  option that sets the process memory limit used by "ls" for
  globbing. The value can be specified as optional third argument
  to "-L" (or LimitRecursion in config file). Because it's
  optional, the old configuration files will still work without
  change with new binaries and update will be smooth. This change
  allows sites that store an extremely large set of files inside a
  single directory to tune their installation so that the "ls"
  command in that directory will succeed without exceeding the ftpd
  process memory limit. [bsc#1119187]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554811200">- Add the missing build dependency for Tumbleweed.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1560859200">- Add missing run-time dependency on system-user-ftp to ensure that
  user exits. [boo#1136997]
- Processed the spec file with spec-cleaner version 1.1.3.</changelog>
</package>
<package pkgid="9ff177852997b4b705fdba6e0147b71193ab5a1edb1c023e546b9b039a634008" name="python-Django" arch="src">
  <version epoch="0" ver="2.2.4" rel="lp151.2.3.1"/>
  <changelog author="tbechtold@suse.com" date="1521460800">- update to 2.0.3 (bsc#1083305, bsc#1083304, CVE-2018-7536, CVE-2018-7537):
  * Fixed #29108 -- Fixed crash in aggregation of distinct+ordered+sliced querysets.
  * Added CVE-2018-6188 to the security release archive.
  * Post-release version bump.
  * Updated translations from Transifex
  * Added stub release notes for security releases.
  * Fixed incorrect regex in re_path() example.
  * Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments.
  * Fixed #29126 -- Doc'd the behavior of QuerySet.update_or_create() with manually specified pks.
  * Used a CSS positioning in tutorial 6 that doesn't differ across browsers.
  * Fixed typo in bulk_create() documentation.
  * Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string.
  * Removed blank lines per isort 4.3.0.
  * Added stub release notes for 2.0.3.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Fixed #29172 -- Fixed crash with Window expression in a subquery.
  * Fixed #29166 -- Fixed crash in When() expression with a list argument.
  * Fixed #24270 -- Doc'd that django_bash_completion is only in the source distribution.
  * Improved clarity of docs/topics/install.txt.
  * Refs #29125 -- Made Q.deconstruct() omit 'query_utils' in the path and _connector='AND' since it's a default value.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 2.0.3 release.
  * Corrected doc'd type of some parameters from string to str.
  * Fixed #29146 -- Readded ^ and $ inadvertently removed from re_path() examples.
  * Fixed #29107 -- Doc'd that ModelForm doesn't actually inherit from Form.
  * Switched test requirement to new psycopg2-binary package.
  * Added backticks around obj argument in admin docs.
  * Fixed typo in docs/topics/forms/media.txt.
  * Fixed #29109 -- Fixed the admin time picker widget for the Thai locale.
  * Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)).</changelog>
  <changelog author="tbechtold@suse.com" date="1523102400">- update to version 2.0.4:
  * Fixed #29265 -- Removed the suggestion to hardcode static URLs.
  * Fixed #29206 -- Fixed PasswordResetConfirmView crash when the URL contains a non-UUID where one is expected.
  * Fixed #29195 -- Fixed Exists.output_field resolution on single-valued queries.
  * Fixed links to Sphinx docs.
  * Fixed typo in docs/releases/2.0.4.txt.
  * Clarified docs about ISO 8601 week numbering.
  * Fixed #29116 -- Fixed OpenLayersWidget deserialization ignoring the widget map's SRID.
  * Added CVE-2018-7536,7 to the security release archive.
  * Fixed #29221 -- Corrected admin's autocomplete widget to add a space after custom classes.
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Added a pagination example to ListView docs.
  * Fixed #28514 -- Clarifed docs about idempotence of RelatedManager.add().
  * isorted import statements in tutorial example.
  * Fixed #29192 -- Corrected docs regarding overriding fields from abstract base classes.
  * Refs #11278 -- Clarified RelatedManager differences between reverse one-to-many and many-to-many relations.
  * Added stub release notes for 1.11.12.
  * Fixed #29165 -- Clarified how to load initial data with migrations.
  * Fixed #29213 -- Fixed autocomplete widget's translations for zh-hans/zh-hant.
  * Reverted "Expanded docs for AbstractBaseUser.has_usable_password()."
  * Fixed typo in docs/releases/2.0.4/1.11.12.txt.
  * Bumped version for 2.0.4 release.
  * Fixed #29250 -- Added 'django_version' context to startapp/project docs.
  * Added release date for 2.0.4 and 1.11.12.
  * Post-release version bump.
  * Clarified a sentence in docs/topics/i18n/translation.txt.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 2.0.4.
  * Fixed a couple mistakes in docs/ref/forms/widgets.txt.
  * Fixed #28655 -- Added more examples for customizing widgets in a form.</changelog>
  <changelog author="aplanas@suse.com" date="1530532800">- update to version 2.0.7:
  * Fixed admin changelist crash when using a query expression without
    asc() or desc() in the page?s ordering (#29428).
  * Fixed admin check crash when using a query expression in
    ModelAdmin.ordering (#29428).
  * Fixed __regex and __iregex lookups with MySQL 8 (#29451).
  * Fixed migrations crash with namespace packages on Python 3.7
    (#28814).
- update to version 2.0.6
  * Fixed a regression that broke custom template filters that use
    decorators (#29400).
  * Fixed detection of custom URL converters in included patterns
    (#29415).
  * Fixed a regression that added an unnecessary subquery to the GROUP
    BY clause on MySQL when using a RawSQL annotation (#29416).
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS
    3.6.1+ (#29460).
  * Fixed a regression in Django 1.10 that could result in large
    memory usage when making edits using ModelAdmin.list_editable
    (#28462).
- update to version 2.0.5
  * Corrected the import paths that inspectdb generates for
    django.contrib.postgres fields (#29307).
  * Fixed a regression in Django 1.11.8 where altering a field with a
    unique constraint may drop and rebuild more foreign keys than
    necessary (#29193).
  * Fixed crashes in django.contrib.admindocs when a view is a
    callable object, such as django.contrib.syndication.views.Feed
    (#29296).
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or
    values_list() after combining an annotated and unannotated
    queryset with union(), difference(), or intersection() crashed due
    to mismatching columns (#29286).</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533729600">- update to version 2.1
- move bash completion to right location
- for full chanfges please see https://docs.djangoproject.com/en/2.1/releases/2.1/
  * Dropped support for MySQL 5.5
  * Dropped support for PostgreSQL 9.3
  * Support for SpatiaLite 4.0 is removed
  * Support for SQLite &lt; 3.7.15 is removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1533729601">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1534248000">- Apply patch to fix urlencode nonstring values:
  * django-urlencode.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1536062400">- update to version 2.1.1
- drop django-urlencode.patch
  * Fixed a race condition in QuerySet.update_or_create() that could result
    in data loss
  * Fixed a regression where QueryDict.urlencode() crashed if the dictionary
    contains a non-string value
  * Fixed a regression in Django 2.0 where using manage.py test --keepdb fails
    on PostgreSQL if the database exists and the user doesn?t have permission
    to create databases
  * Fixed a regression in Django 2.0 where combining Q objects with __in
    lookups and lists crashed
  * Fixed translation failure of DurationField?s ?overflow? error message
  * Fixed a regression where the admin change form crashed if the user doesn?t
    have the ?add? permission to a model that uses TabularInline
  * Fixed a regression where a related_query_name reverse accessor wasn?t
    set up when a GenericRelation is declared on an abstract base model
  * Fixed the test client?s JSON serialization of a request data dictionary
    for structured content type suffixes
  * Made the admin change view redirect to the changelist view after a POST
    if the user has the ?view? permission
  * Fixed admin change view crash for view-only users if the form
    has an extra form field
  * Fixed a regression in Django 2.0.5 where QuerySet.values() or values_list()
    after combining querysets with extra() with union(), difference(),
    or intersection() crashed due to mismatching columns</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537272000">- Switch of BR selenium for non-Intel platforms.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1538654400">- Update to version 2.1.2
  * CVE-2018-16984: Password hash disclosure to ?view only? admin
    users
  * Fixed a regression where nonexistent joins in F() no longer raised
    FieldError (#29727).
  * Fixed a regression where files starting with a tilde or underscore
    weren?t ignored by the migrations loader (#29749).
  * Made migrations detect changes to Meta.default_related_name
    (#29755).
  * Added compatibility for cx_Oracle 7 (#29759).
  * Fixed a regression in Django 2.0 where unique index names weren?t
    quoted (#29778).
  * Fixed a regression where sliced queries with multiple columns with
    the same name crashed on Oracle 12.1 (#29630).
  * Fixed a crash when a user with the view (but not change)
    permission made a POST request to an admin user change form
    (#29809).</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1544443200">- Update to version 2.1.4
  * Corrected the default password list that CommonPasswordValidator uses
    by lowercasing all passwords to match the format expected by the validator
  * Prevented repetitive calls to geos_version_tuple() in the WKBWriter class in
    an attempt to fix a random crash involving LooseVersion
  * Fixed keep-alive support in runserver after it was disabled o 2.0
  * Fixed admin view-only change form crash when using ModelAdmin.prepopulated_fields
  * Fixed ?Please correct the errors below? error message when editing an object
    in the admin if the user only has the ?view? permission on inlines
  * Fixed a regression in Django 2.0 where combining Q objects with __in lookups
    and lists crashed
  * Fixed a regression in Django 2.0 where test databases aren?t reused
    with manage.py test --keepdb on MySQL
  * Fixed a regression where cached foreign keys that use to_field were
    incorrectly cleared in Model.save()
  * Fixed a regression in Django 2.0 where FileSystemStorage crashes
    with FileExistsError if concurrent saves try to create the same directory</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1547121600">- update to 2.1.5 (CVE-2019-3498, bsc#1120932):
  * CVE-2019-3498: Content spoofing possibility in the default 404 page
  * Fixed compatibility with mysqlclient 1.3.14 (#30013).
  * Fixed a schema corruption issue on SQLite 3.26+. You might have to drop
    and rebuild your SQLite database if you applied a migration while using
    an older version of Django with SQLite 3.26 or later (#29182).
  * Prevented SQLite schema alterations while foreign key checks are enabled
    to avoid the possibility of schema corruption (#30023).
  * Fixed a regression in Django 2.1.4 (which enabled keep-alive connections)
    where request body data isn?t properly consumed for such
    connections (#30015).
  * Fixed a regression in Django 2.1.4 where
    InlineModelAdmin.has_change_permission() is incorrectly called with
    a non-None obj argument during an object add (#30050).</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1549972800">- update to 2.1.7 (CVE-2019-6975, bsc#1124991):
  * Corrected packaging error from 2.1.6
  * Memory exhaustion in django.utils.numberformat.format()
    If django.utils.numberformat.format() ? used by contrib.admin as well
    as the the floatformat, filesizeformat, and intcomma templates
    filters ? received a Decimal with a large number of digits or a
    large exponent, it could lead to significant memory usage
    due to a call to '{:f}'.format().
    To avoid this, decimals with more than 200 digits are now formatted
    using scientific notation.
  * Made the obj argument of InlineModelAdmin.has_add_permission() optional
    to restore backwards compatibility with third-party code that doesn?t
    provide it</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553342400">- Add patch to build with PyYAML &gt;5:
  * pyyaml5.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1554292800">- update to 2.2
- drop pyyaml5.patch
- add i18n_test.patch
  * HttpRequest.headers to allow simple access to a request?s headers.
  * Database-level constraints on models.
  * Watchman compatibility for runserver to improve the performance</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
</package>
<package pkgid="e8ddc15ff622feef496f490874678ea328d6a03e108b104416cc1949cbe35308" name="python-M2Crypto" arch="src">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="ea9d6ba9f8ffee564e08c13fbc7bb420babc65cf93c886849f383a370babd9ab" name="python-M2Crypto-doc" arch="noarch">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="0ff6b635aefc1c9a77128e7ad20264e167b4bdac4a4c15562c05e12ee69e9ec3" name="python-Twisted" arch="src">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="hpj@urpla.net" date="1400155200">- add dependency python-service_identity for testing purposes</changelog>
  <changelog author="termim@gmail.com" date="1411041600">- Update to version 14.0.2:
  + No significant changes have been made for this release.
- Update to version 14.0.1:
  + BrowserLikePolicyForHTTPS would always ignore the specified
    trustRoot and use the system trust root instead, which has been
    rectified. (#7647)</changelog>
  <changelog author="p.drouand@gmail.com" date="1412251200">- Remove unprovided python-service_identity; it's not required in any
  way</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="254cdcd18c36dbb14a8a46607e9aefea62df134fa45b2a991a525882feecfc13" name="python-Twisted-doc" arch="i586">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="533a83ba1c23379f9b98e1c0e11949741b5c04a85c274ec2201609f4594fd852" name="python-Twisted-doc" arch="x86_64">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="b54369382871656a0a35b5e3ba2be3febb30d48d01f77d88695f6ac1019b541a" name="python-aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="eb686016a613effe4f0b4070298c748551e6a97e0a21378cd9f9d09d688954f4" name="python-billiard" arch="src">
  <version epoch="0" ver="3.6.0.0" rel="lp151.3.3.1"/>
  <changelog author="jfunk@funktronics.ca" date="1322222400">- Update to 0.3.1
  * Fixed broken bool evaluation in supervisor. Thanks to jonozzz
    The bug originated from a ``a if x else b`` vs. ``x and a or bz``
    confusion when porting code to Python 2.4.
  * ``ApplyResult._set`` can't delete the result if it's not been accepted.
    This also means ``ApplyResult._ack`` needs to delete the result if the job
    has been marked ready.
- 0.3.0
  * Added support for accept callbacks.
- 0.2.3
  * Python 2.4 support.</changelog>
  <changelog author="jfunk@funktronics.ca" date="1335355200">- Generate new spec
- Update to 2.7.3.3
  * PyPy now falls back to using its internal _multiprocessing module, so
    everything works except for forking_enable(False) (which silently degrades)
  * Fixed Python 2.5 compat issues.
  * Uses more with statements
  * Merged some of the changes from the Python 3 branch.
- 2.7.3.2 - 2012-04-20
  * Now installs on PyPy/Jython (but does not work).
- 2.7.3.1 - 2012-04-20
  * Python 2.5 support added.
- 2.7.3.0 - 2012-04-20
  * Updated from Python 2.7.3
  * Python 2.4 support removed, now only supports 2.5, 2.6 and 2.7. (may
    consider py3k support at some point).
  * Pool improvments from Celery.
  * no-execv patch added (http://bugs.python.org/issue8713)</changelog>
  <changelog author="jfunk@funktronics.ca" date="1335528000">- Update to 2.7.3.4
  * Added billiard.ensure_multiprocessing() - Raises NotImplementedError if
    the platform does not support multiprocessing (e.g. Jython).</changelog>
  <changelog author="jfunk@funktronics.ca" date="1337256000">- Update to 2.7.3.5
  * Now always cleans up after sys.exc_info() to avoid cyclic references.
  * ExceptionInfo without arguments now defaults to sys.exc_info.
  * Forking can now be disabled using the MULTIPROCESSING_FORKING_DISABLE
    environment variable.
    Also this envvar is set so that the behavior is inherited after execv.
  * The semaphore cleanup process started when execv is used now sets a useful
    process name if the setproctitle module is installed.
  * Sets the FORKED_BY_MULTIPROCESSING environment variable if forking is
    disabled.</changelog>
  <changelog author="jfunk@funktronics.ca" date="1337774400">- Update to 2.7.3.7
  * Fixes Python 2.5 support.
- 2.7.3.6 - 2012-05-21
  * Pool: Can now be used in an event loop, without starting the supporting
    threads (TimeoutHandler still not supported)
  * Pool: Process too frequent restart protection now only counts if the
    process had a non-successful exitcode.
  * Pool: New options max_restart + max_restart_freq
  * Pool: The ``WorkerLostError`` message now includes the exitcode of the
    process that disappeared.
- Build HTML docs</changelog>
  <changelog author="jfunk@funktronics.ca" date="1352808000">- Update to 2.7.3.18:
  * [Pool] Fix for check_timeouts if not set.
    Fix contributed by Dmitry Sukhov
  * Fixed pickle problem with Traceback.
    Code.frame.__loader__ is now ignored as it may be set to an unpickleable
    object.
  * The Django old-layout warning was always showing.
  2.7.3.17 - 2012-09-26
  * Fixes typo
  2.7.3.16 - 2012-09-26
  * Windows: Fixes for SemLock._rebuild (Issue #24).
  * Pool: Job terminated with terminate_job now raises
    billiard.exceptions.Terminated.
  2.7.3.15 - 2012-09-21
  * Windows: Fixes unpickling of SemLock when using fallback.
  * Windows: Fixes installation when no C compiler.
  2.7.3.14 - 2012-09-20
  * Installation now works again for Python 3.
  2.7.3.13 - 2012-09-14
  * Merged with Python trunk (many authors, many fixes: see Python changelog
    in trunk).
  * Using execv now also works with older Django projects using setup_environ
    (Issue #10).
  * Billiard now installs with a warning that the C extension could not be
    built if a compiler is not installed or the build fails in some other way.
    It really is recommended to have the C extension installed when running
    with force execv, but this change also makes it easier to install.
  * Pool: Hard timeouts now sends KILL shortly after TERM so that C extensions
    cannot block the signal.
    Python signal handlers are called in the interpreter, so they cannot be
    called while a C extension is blocking the interpreter from running.
  * Now uses a timeout value for Thread.join that doesn't exceed the maximum
    on some platforms.
  * Fixed bug in the SemLock fallback used when C extensions not installed.
    Fix contributed by Mher Movsisyan.
  * Pool: Now sets a Process.index attribute for every process in the pool.
    This number will always be between 0 and concurrency-1, and can be used
    to e.g. create a logfile for each process in the pool without creating a
    new logfile whenever a process is replaced.
  2.7.3.12 - 2012-08-05
  * Fixed Python 2.5 compatibility issue.
  * New Pool.terminate_job(pid) to terminate a job without raising
    WorkerLostError
  2.7.3.11 - 2012-08-01
  * Adds support for FreeBSD 7+
    Fix contributed by koobs.
  * Pool: New argument allow_restart is now required to enable the pool
    process sentinel that is required to restart the pool.
    It's disabled by default, which reduces the number of file descriptors/
    semaphores required to run the pool.
  * Pool: Now emits a warning if a worker process exited with error-code.
    But not if the error code is 155, which is now returned if the worker
    process was recycled (maxtasksperchild).
  * Python 3 compatibility fixes.
  * Python 2.5 compatibility fixes.
  2.7.3.10 - 2012-06-26
  * The TimeLimitExceeded exception string representation only included the
    seconds as a number, it now gives a more human friendly description.
  * Fixed typo in LaxBoundedSemaphore.shrink.
  * Pool: ResultHandler.handle_event no longer requires any arguments.
  * setup.py bdist now works
  2.7.3.9 - 2012-06-03
  * Environment variable MP_MAIN_FILE envvar is now set to the path of the
    __main__ module when execv is enabled.
  * Pool: Errors occurring in the TaskHandler are now reported.
  2.7.3.8 - 2012-06-01
  * Can now be installed on Py 3.2
  * Issue #12091: simplify ApplyResult and MapResult with threading.Event
    Patch by Charles-Francois Natali
  * Pool: Support running without TimeoutHandler thread.
  * The with_*_thread arguments has also been replaced with a single
    threads=True argument.
  * Two new pool callbacks:
  * on_timeout_set(job, soft, hard)
    Applied when a task is executed with a timeout.
  * on_timeout_cancel(job)
    Applied when a timeout is cancelled (the job completed)</changelog>
  <changelog author="jfunk@funktronics.ca" date="1359115200">- Update to 2.7.3.19:
  * Fixes problem at shutdown when gc has collected symbols.
  * Pool now always uses _kill for Py2.5 compatibility on Windows (Issue
    [#32]).
  * Fixes Python 3 compatibility issues</changelog>
  <changelog author="alexandre@exatati.com.br" date="1363953600">- Update to 2.7.3.23:
  - Windows: Now catches SystemExit from setuptools while trying to
    build the C extension (Issue #41).
- Aditional changes from 2.7.3.22:
  - Pool: apply_async now supports a callbacks_propagate keyword
    argument that can be a tuple of exceptions to propagate in
    callbacks. (callback, errback, accept_callback, timeout_callback).
  - Errors are no longer logged for OK and recycle exit codes.
    This would cause normal maxtasksperchild recycled process
    to log an error.
  - Fixed Python 2.5 compatibility problem (Issue #33).
  - FreeBSD: Compilation now disables semaphores if Python was built
    without it (Issue #40).
    Contributed by William Grzybowski
- Aditional changes from 2.7.3.21:
  - Fixed typo EX_REUSE -&gt; EX_RECYCLE
  - Code now conforms to new pep8.py rules.
- Aditional changes from 2.7.3.20:
  - Pool: Disable restart limit if maxR is not set.
  - Pool: Now uses os.kill instead of signal.signal.
    Contributed by Lukasz Langa
  - Fixed name error in process.py
  - Pool: ApplyResult.get now properly raises exceptions.
    Fix contributed by xentac.</changelog>
  <changelog author="speilicke@suse.com" date="1372420800">- Update to version 2.7.3.28:
  + Pool: Fixed regression that disabled the deadlock fix in 2.7.3.24
  + Pool: RestartFreqExceeded could be raised prematurely.
  + Process: Include pid in startup and process INFO logs.
- Changes from version 2.7.3.27:
  + Manager now works again.
  + Python 3 fixes for billiard.connection.
  + Fixed invalid argument bug when running on Python 3.3
  + Ignore OSError when setting up signal handlers.
- Changes from version 2.7.3.26:
  + Pool: Child processes must ignore SIGINT.
- Changes from version 2.7.3.25:
  + Pool: 2.7.3.24 broke support for subprocesses (Issue #48).
- Changes from version 2.7.3.24:
  + Pool:  Make sure finally blocks are called when process exits due to a signal.
  + Pool:  Can now use GDB to debug pool child processes.
  + Fixes Python 3 compatibility problems.</changelog>
  <changelog author="p.drouand@gmail.com" date="1380110400">- Update to version 2.7.3.32
  + Fixed compatibility with Python 3.3
  + Process boostrap: Now ignores errors while flushing stdout (Issue #16)
- Changes from version 2.7.3.31
  + Recent changes broke support for running without C extension (Issue #57)
- Changes from version 2.7.3.30
  + Fixed ImportError in billiard._ext
- Changes from version 2.7.3.29
  + Compilation: Fixed improper handling of HAVE_SEM_OPEN (Issue #55)
  + Process now releases logging locks after fork.
  + Pool.terminate_job now ignores No such process errors.
  + billiard.Pool entrypoint did not support new arguments to billiard.pool.Pool
  + Connection inbound buffer size increased from 1kb to 128kb.
  + C extension cleaned up by properly adding a namespace to symbols.
  +_exit_function now works even if thread wakes up after gc collect.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 3.3.0.6
  + Now works without C extension again.
  + New ``_billiard.read(fd, buffer, [len, ])` function
    implements os.read with buffer support (new buffer API)
  + New pure-python implementation of ``Connection.send_offset``.
- Changes from 3.3.0.5
  + All platforms except for Windows/PyPy/Jython now requires the C extension.
- Changes from 3.3.0.4
  + Fixed problem with Python3 and setblocking.
- Changes from 3.3.0.3
  + Now works on Windows again.
- Changes from 3.3.0.2
  + ApplyResult.terminate() may be set to signify that the job
    must not be executed.  It can be used in combination with
    Pool.terminate_job.
  + Pipe/_SimpleQueue: Now supports rnonblock/wnonblock arguments
    to set the read or write end of the pipe to be nonblocking.
  + Pool: Log message included exception info but exception happened
    in another process so the resulting traceback was wrong.
  + Pool: Worker process can now prepare results before they are sent
    back to the main process (using ``Worker.prepare_result``).
- Changes from 3.3.0.1
  + Pool: New ``correlation_id`` argument to ``apply_async`` can be
    used to set a related id for the ``ApplyResult`` object returned:
    &gt;&gt;&gt; r = pool.apply_async(target, args, kwargs, correlation_id='foo')
    &gt;&gt;&gt; r.correlation_id
    'foo'
  + Pool: New callback `on_process_exit` is called when a pool
    process exits, with signature ``(pid, exitcode)``.
  + Pool: Improved the too many restarts detection.
- Changes from 3.3.0.0
  + Dual code base now runs on Python 2.6+ and Python 3.
  + No longer compatible with Python 2.5
  + Includes many changes from multiprocessing in 3.4.
  + Now uses ``time.monotonic`` when available, also including
    fallback implementations for Linux and OS X.
  + No longer cleans up after receiving SIGILL, SIGSEGV or SIGFPE
  + ``Finalize`` and ``register_after_fork`` is now aliases to multiprocessing.
    It's better to import these from multiprocessing directly now
    so that there aren't multiple registries.
  + New `billiard.queues._SimpleQueue` that does not use semaphores.
  + Pool: Can now be extended to support using multiple IPC queues.
  + Pool: Can now use async I/O to write to pool IPC queues.
  + Pool: New ``Worker.on_loop_stop`` handler can be used to add actions
    at pool worker process shutdown.
    Note that, like all finalization handlers, there is no guarantee that
    this will be executed.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1385899200">- Update to version 3.3.0.8:
  + Now also sets ``multiprocessing.current_process`` for compatibility
    with loggings ``processName`` field</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- Update to 3.3.0.18
  - see https://pypi.python.org/pypi/billiard for complete changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429963200">- update to version 3.3.0.20:
  * Pool: Timeouts will attempt to send SIGKILL, but this signal
    does not exist on Windows.  Replaced with SIGTERM.
- additional changes from version 3.3.0.19:
  * Pool: Exceptions in user timeout callbacks are now logged
    instead of crashing the pool. Contributed by Pierre Fersing.
  * Pool: Exit codes in errors were improperly being represented
    as signals.
  * Pool: ``.map``. and ``.imap`` now working again.
  * Now builds on FreeBSD 10. Contributed by Michael Fladischer.
- update project URL
- add fdupes as BuildRequires and call it after install
- remove BuildRequires python-nose-cover3, not needed by the tests
  anymore
- set a minimum version for python-nose
- remove unwanted shebang of funtests/setup.py
- add -fno-strict-aliasing to CFLAGS to avoid potential breakage</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1452686400">- Update to version 3.3.0.22:
  * Wheel packages for Windows now available.
- Changes from 3.3.0.21:
  * Pool: Fixed semaphore error on Python3.
  * Fixed libSystem error on OS X El Capitan.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1498478400">- update to version 3.5.0.2:
  * max_memory_per_child was measured in kilobytes on Linux, but
    bytes on *BSD/MacOS, it's now always kilobytes.
  * Windows: Adds support for max_memory_per_child, but requires
    the psutil package to be installed.
  * Fixed bug in ForkingPickler.loadbuf, where it tried to pass
    a BytesIO instance directly to ``pickle.loads`` on Python 2.7.
- additional changes from version 3.5.0.1:
  * Connection: Properly handle EINTR (Issue #191).
  * Fixed bug with missing CreateProcess for Windows on Python 2.7.
  * Adds Process._counter for compatibility with Python &lt;3.5.
- additional changes from version 3.5.0.0:
  * No longer supports Python 2.6
    You need Python 2.7 or later to use this version of billiard.
  * Merged changes from CPython 3.5
- convert the package to singlespec and import changes from
  python3-billiard
- change the source URL to pythonhosted.org
- update the BuildRequires for test:
  * remove mock, nose and unittest2
  * add case and pytest
- split the documentation to a separate package
- remove the shebang cleanup: not needed anymore</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Fix the build again
- Fix the fdupes call
- Update version to 3.5.0.5: (boo#1136100)
  * Various small bugfixes all around</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1549800000">- Update to v3.6.0.0
  + Add support of sending parent process death signal.
  + Previous fix for handling timeouts caused a problem in warm shutdowns
    due to use of deepcopy.
    We now use a shallow copy of the cache and do so only when it is needed.
  + Cleanup old checks and workarounds for Python versions we no longer support.</changelog>
</package>
<package pkgid="7bef8cc59172a48476ae13d6b50e7df9d1885b319eee457580faaf7c15951766" name="python-billiard-doc" arch="noarch">
  <version epoch="0" ver="3.6.0.0" rel="lp151.3.3.1"/>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 3.3.0.6
  + Now works without C extension again.
  + New ``_billiard.read(fd, buffer, [len, ])` function
    implements os.read with buffer support (new buffer API)
  + New pure-python implementation of ``Connection.send_offset``.
- Changes from 3.3.0.5
  + All platforms except for Windows/PyPy/Jython now requires the C extension.
- Changes from 3.3.0.4
  + Fixed problem with Python3 and setblocking.
- Changes from 3.3.0.3
  + Now works on Windows again.
- Changes from 3.3.0.2
  + ApplyResult.terminate() may be set to signify that the job
    must not be executed.  It can be used in combination with
    Pool.terminate_job.
  + Pipe/_SimpleQueue: Now supports rnonblock/wnonblock arguments
    to set the read or write end of the pipe to be nonblocking.
  + Pool: Log message included exception info but exception happened
    in another process so the resulting traceback was wrong.
  + Pool: Worker process can now prepare results before they are sent
    back to the main process (using ``Worker.prepare_result``).
- Changes from 3.3.0.1
  + Pool: New ``correlation_id`` argument to ``apply_async`` can be
    used to set a related id for the ``ApplyResult`` object returned:
    &gt;&gt;&gt; r = pool.apply_async(target, args, kwargs, correlation_id='foo')
    &gt;&gt;&gt; r.correlation_id
    'foo'
  + Pool: New callback `on_process_exit` is called when a pool
    process exits, with signature ``(pid, exitcode)``.
  + Pool: Improved the too many restarts detection.
- Changes from 3.3.0.0
  + Dual code base now runs on Python 2.6+ and Python 3.
  + No longer compatible with Python 2.5
  + Includes many changes from multiprocessing in 3.4.
  + Now uses ``time.monotonic`` when available, also including
    fallback implementations for Linux and OS X.
  + No longer cleans up after receiving SIGILL, SIGSEGV or SIGFPE
  + ``Finalize`` and ``register_after_fork`` is now aliases to multiprocessing.
    It's better to import these from multiprocessing directly now
    so that there aren't multiple registries.
  + New `billiard.queues._SimpleQueue` that does not use semaphores.
  + Pool: Can now be extended to support using multiple IPC queues.
  + Pool: Can now use async I/O to write to pool IPC queues.
  + Pool: New ``Worker.on_loop_stop`` handler can be used to add actions
    at pool worker process shutdown.
    Note that, like all finalization handlers, there is no guarantee that
    this will be executed.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1385899200">- Update to version 3.3.0.8:
  + Now also sets ``multiprocessing.current_process`` for compatibility
    with loggings ``processName`` field</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- Update to 3.3.0.18
  - see https://pypi.python.org/pypi/billiard for complete changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429963200">- update to version 3.3.0.20:
  * Pool: Timeouts will attempt to send SIGKILL, but this signal
    does not exist on Windows.  Replaced with SIGTERM.
- additional changes from version 3.3.0.19:
  * Pool: Exceptions in user timeout callbacks are now logged
    instead of crashing the pool. Contributed by Pierre Fersing.
  * Pool: Exit codes in errors were improperly being represented
    as signals.
  * Pool: ``.map``. and ``.imap`` now working again.
  * Now builds on FreeBSD 10. Contributed by Michael Fladischer.
- update project URL
- add fdupes as BuildRequires and call it after install
- remove BuildRequires python-nose-cover3, not needed by the tests
  anymore
- set a minimum version for python-nose
- remove unwanted shebang of funtests/setup.py
- add -fno-strict-aliasing to CFLAGS to avoid potential breakage</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1452686400">- Update to version 3.3.0.22:
  * Wheel packages for Windows now available.
- Changes from 3.3.0.21:
  * Pool: Fixed semaphore error on Python3.
  * Fixed libSystem error on OS X El Capitan.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1498478400">- update to version 3.5.0.2:
  * max_memory_per_child was measured in kilobytes on Linux, but
    bytes on *BSD/MacOS, it's now always kilobytes.
  * Windows: Adds support for max_memory_per_child, but requires
    the psutil package to be installed.
  * Fixed bug in ForkingPickler.loadbuf, where it tried to pass
    a BytesIO instance directly to ``pickle.loads`` on Python 2.7.
- additional changes from version 3.5.0.1:
  * Connection: Properly handle EINTR (Issue #191).
  * Fixed bug with missing CreateProcess for Windows on Python 2.7.
  * Adds Process._counter for compatibility with Python &lt;3.5.
- additional changes from version 3.5.0.0:
  * No longer supports Python 2.6
    You need Python 2.7 or later to use this version of billiard.
  * Merged changes from CPython 3.5
- convert the package to singlespec and import changes from
  python3-billiard
- change the source URL to pythonhosted.org
- update the BuildRequires for test:
  * remove mock, nose and unittest2
  * add case and pytest
- split the documentation to a separate package
- remove the shebang cleanup: not needed anymore</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Fix the build again
- Fix the fdupes call
- Update version to 3.5.0.5: (boo#1136100)
  * Various small bugfixes all around</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1549800000">- Update to v3.6.0.0
  + Add support of sending parent process death signal.
  + Previous fix for handling timeouts caused a problem in warm shutdowns
    due to use of deepcopy.
    We now use a shallow copy of the cache and do so only when it is needed.
  + Cleanup old checks and workarounds for Python versions we no longer support.</changelog>
</package>
<package pkgid="321b461b30eac0f371670ac40ef41088d18e288f1b0068c9f4484d25cf6c0e4e" name="python-libgpiod" arch="x86_64">
  <version epoch="0" ver="1.4" rel="lp151.2.3.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977600">- Initial package version 1.1</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528977601">- Add C++ bindings</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update RPM groups. Reorder sentences to put the library first,
  and the old sysfs interface last.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148800">- Update to 1.1.1:
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536148801">- Add python binding</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1543838400">- Update to 1.2:
  * New features:
  - new contextless event monitor that should replace the previous event loop
    which caused problems on hardware that doesn't allow to watch both rising
    and falling edge events
  - port gpiomon to the new event monitor
  - deprecate event loop routines
  * Improvements:
  - many minor improvements and tweaks in the python module
  - new test cases for python bindings
  - add much more detailed documentation for python bindings
  - coding style improvements in gpio-tools
  - remove unicode characters from build scripts
  - improve the help text messages in gpio-tools
  - make gpiod_chip_open() and its variants verify that we're really trying to
    open a character device associated with a GPIO chip
  * Bug fixes:
  - fix memory leaks in python bindings
  - fix a memory corruption bug in python bindings
  - fix the default_vals argument in line request implementation in python
    bindings
  - fix a compilation warning in python bindings
  - fix gpiod_Chip_find_lines() for nonexistent lines (python bindings)
  - add a missing include in C++ bindings examples
  - correctly display the version string in gpio-tools</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554292800">- Update to 1.3:
  * New features:
  - the gpio-tools now have automatically generated (using help2man) man pages
    that are bundled with the release tarball
  - support a singular 'default_val' argument in Line.request() in python
    bindings
  - the test executable can now be installed to the bindir along with the
    gpio-tools and the testing framework will look for the binaries in standard
    locations if it's not run from the top source directory
  - gpiomon now supports line buffered output
  * Improvements:
  - tweaks to the C API documentation
  - treewide unification of the naming of local variables
  - extended helptest in gpioset (explanation of the way the character device
    works aimed at reducing user confusion when a GPIO line reverts to its
    default value after gpioset exits)
  - the source directories have been rearranged and the src/ directory was
    dropped, lib/ and tools/ now live in the top source directory
  - minor coding style fixes in python bindings, ctxless functions and tools
  - automatically generated documentation is now removed by 'make clean'
  - all Makefiles now use top_builddir instead of relative paths
  - code shrink in configure.ac
  - add a brief section about API documentation to README
  * Bug fixes:
  - fix a segfault causing bug in C++ bindings
  - make bitset_cmp::operator() const as this is required by C++17
  - ignore 'remove' events from udev in the testing framework
  - don't segfault on num_lines = 0 in ctxless functions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465600">- Move libgpiodcxx to its own package</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1554465601">- devel package now requires libgpiod and libgpiodcxx</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1555070400">- Add conflicts with libgpiod1 to help upgrade</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427200">- Update to 1.4:
  * New features:
  - updated the testing framework to work with linux v5.1 in which the debugfs
    interface of the GPIO testing module changed in a backward incompatible way
  - factored out the code controlling the GPIO testing module into a separate
    shared library that may be reused by future testing executables for different
    language bindings
  - removed the --enable-install-tests build option and the make check target as
    they were redundant, subsequently tests are now installed as a normal program
    whenever they're enabled with --enable-tests
  * Improvements:
  - removed unnecessary std::move calls from C++ bindings
  - added the explicit keyword to bool() operators in C++ bindings
  * Bug fixes:
  - fix out of source build of man pages</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427201">- Enable build of tests (package gpiod-test and libgpiomockup) for Tumbleweed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1560427202">- Replace *_number with *_soversion</changelog>
</package>
<package pkgid="1d9c683e23889b00431c2bc8294b3e9ccb9730ddb6f8a2c50e4013b80b9924fb" name="python-relatorio" arch="src">
  <version epoch="0" ver="0.8.1" rel="lp151.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1382097600">- Initial package ( version 0.6.0 )</changelog>
  <changelog author="axel.braun@gmx.de" date="1436529600">- Version 0.6.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1442664000">- version 0.6.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1467288000">- version 0.6.3
  changed naming of .changes file</changelog>
  <changelog author="axel.braun@gmx.de" date="1471176000">- fixed link to pypi</changelog>
  <changelog author="axel.braun@gmx.de" date="1472126400">- LICENSE file added</changelog>
  <changelog author="axel.braun@gmx.de" date="1482062400">- version 0.6.4
  * Use StringIO instead of BytesIO for TextSerializer result</changelog>
  <changelog author="axel.braun@gmx.de" date="1488974400">- changes for singlespec</changelog>
  <changelog author="axel.braun@gmx.de" date="1501416000">- Version 0.7.0
  * Replace hard-coded extensions by mimetypes guess
  * Add more guess types: 'boolean', 'date', 'time' and 'void'
  * Add support for Flat OpenDocument</changelog>
  <changelog author="axel.braun@gmx.de" date="1508500800">- Version 0.7.1 - Bugfix release
  * Remove warning when import plugin fails
  * Apply the guess type function on the correct node
  * Fix guess_type for date and datetime</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- version 0.8.0
  * Do not guess_type on styled cell content
  * Remove type attributes when guessing type
  * Add support for Python 3.6
  * Remove soft-page-break
  * tests added to spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1512993600">- Explain why the tests are conditioned around
- Specify all the runtime dependencies based on setup.py</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1538568000">- version 0.8.1
  * Add support for Python 3.7
  * Escape invalid XML characters
  * Enforce closing tag to be the same directive as the opening
  * Use compression for zip file
  * Write mimetype as first file of the zip file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562328000">- python-magic added to requirements</changelog>
</package>
<package pkgid="57f84af9436e2dc618dfe466c0e489f304e7a18a77530f1a1b4c02f1da3d80aa" name="python-requests" arch="src">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="f18a2d3e88ca31d7dfff63c00f3ad24501413191bb47d49543e70468426a0659" name="python-requests-test" arch="src">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="d5ebe8dd395c72bc19a5465f4ddc127cf8d3cda9aa5d3f3979c8b04c5d0d2df9" name="python-shaptools" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.2.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First package version</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Fix UT to check the inst formatting correctly
- Move the comment to the right place
- Enforce the HANA instance nr format.
- Forces Intance nr always with 2 positions filled with 0
- Forces right formating on HANA OS admin user.</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.</changelog>
  <changelog author="dakechi@suse.com" date="1551873600">- Fix the package license to be in synch with repo license.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556020800">- Remove enum34 dependency from code</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update SR registration process. Now the methods retries the
  registration command until a successful return and copies the
  SSFS files from the primary node as well</changelog>
  <changelog author="Ayoub Belarbi (abelarbi@suse.com)" date="1559131200">- Update hdb connector to return metadata besides the query
  records.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559649600">- Create package version 0.2.0 with the latest changes</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available from SLE12-SP2 to SLE15 versions
  (jsc#SLE-4031, jsc#SLE-4143, boo#1137989)</changelog>
</package>
<package pkgid="a038e534234e94878de0f4e282b5f8716b71d1e519af664d4711dfb94a714aa2" name="python-tzlocal" arch="src">
  <version epoch="0" ver="1.4" rel="lp151.3.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1415188800">- inital commit</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275200">- added required pytz dependency
- enhanced truncated description and add URL to source</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275201">- corrected license
- added check section with python test</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Reworked spec file
  * Bump version
  * Use github upstream url
  * Improve description and summary
  * Use tarball instead of zip
  * Minimize %files section</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436788800">- Fix building on SLES 11</changelog>
  <changelog author="ms@suse.com" date="1442232000">- Package required in SLE12 due to fate#319400</changelog>
  <changelog author="rjschwei@suse.com" date="1499774400">- Convert to singlespec build</changelog>
  <changelog author="bear454@opensuse.org" date="1503921600">- Update to version 1.4
  - Relicensed upstream as MIT
  - Dropping support for Python versions 2.5, 3.1, 3.2
  - adding support for Python 3.6
  - Closes stdout and stderr to get rid of ResourceWarnings
  - Added support for /var/db/zoneinfo
  - Tests failed if TZ was set in the environment.
  - Replaces os.popen() with subprocess.Popen()
  - Systemd stores no time zone name, forcing us to look at the
    name of the file that localtime symlinks to.</changelog>
  <changelog author="sean.marlow@suse.com" date="1506945600">- Update source tarball location.</changelog>
  <changelog author="Boris Manojlovic &lt;boris@steki.net&gt;" date="1559736000">- fix fdupes handling as it was linking python2 source into python3
  package breaking it boo#1137352</changelog>
</package>
<package pkgid="f9492ca85c478b14481f937ae70a7ac2f9c359f50398b6f8a5ca676babe00ac1" name="python2-M2Crypto" arch="i586">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="d0fe4868846821f764798dbefd5da8924f178b427f5a37da63792b0df3367dff" name="python2-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="19bc8c46e69e3ec65794eb2da019d91da095ab518601800e3dd71803c7156d05" name="python2-Twisted" arch="i586">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="35e015efaeef3383e6fabcfeebbf94a1422102b113eabfe052899e1f20a4aa74" name="python2-Twisted" arch="x86_64">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="9105511d4e7686acb3dfa71621de2ae846bc80937440552e6f7afc6fe204524e" name="python2-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="dad88b37ea6692f7dab467cb06fd98b253ffb7c403492e9546d567c208715d5c" name="python2-billiard" arch="x86_64">
  <version epoch="0" ver="3.6.0.0" rel="lp151.3.3.1"/>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 3.3.0.6
  + Now works without C extension again.
  + New ``_billiard.read(fd, buffer, [len, ])` function
    implements os.read with buffer support (new buffer API)
  + New pure-python implementation of ``Connection.send_offset``.
- Changes from 3.3.0.5
  + All platforms except for Windows/PyPy/Jython now requires the C extension.
- Changes from 3.3.0.4
  + Fixed problem with Python3 and setblocking.
- Changes from 3.3.0.3
  + Now works on Windows again.
- Changes from 3.3.0.2
  + ApplyResult.terminate() may be set to signify that the job
    must not be executed.  It can be used in combination with
    Pool.terminate_job.
  + Pipe/_SimpleQueue: Now supports rnonblock/wnonblock arguments
    to set the read or write end of the pipe to be nonblocking.
  + Pool: Log message included exception info but exception happened
    in another process so the resulting traceback was wrong.
  + Pool: Worker process can now prepare results before they are sent
    back to the main process (using ``Worker.prepare_result``).
- Changes from 3.3.0.1
  + Pool: New ``correlation_id`` argument to ``apply_async`` can be
    used to set a related id for the ``ApplyResult`` object returned:
    &gt;&gt;&gt; r = pool.apply_async(target, args, kwargs, correlation_id='foo')
    &gt;&gt;&gt; r.correlation_id
    'foo'
  + Pool: New callback `on_process_exit` is called when a pool
    process exits, with signature ``(pid, exitcode)``.
  + Pool: Improved the too many restarts detection.
- Changes from 3.3.0.0
  + Dual code base now runs on Python 2.6+ and Python 3.
  + No longer compatible with Python 2.5
  + Includes many changes from multiprocessing in 3.4.
  + Now uses ``time.monotonic`` when available, also including
    fallback implementations for Linux and OS X.
  + No longer cleans up after receiving SIGILL, SIGSEGV or SIGFPE
  + ``Finalize`` and ``register_after_fork`` is now aliases to multiprocessing.
    It's better to import these from multiprocessing directly now
    so that there aren't multiple registries.
  + New `billiard.queues._SimpleQueue` that does not use semaphores.
  + Pool: Can now be extended to support using multiple IPC queues.
  + Pool: Can now use async I/O to write to pool IPC queues.
  + Pool: New ``Worker.on_loop_stop`` handler can be used to add actions
    at pool worker process shutdown.
    Note that, like all finalization handlers, there is no guarantee that
    this will be executed.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1385899200">- Update to version 3.3.0.8:
  + Now also sets ``multiprocessing.current_process`` for compatibility
    with loggings ``processName`` field</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- Update to 3.3.0.18
  - see https://pypi.python.org/pypi/billiard for complete changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429963200">- update to version 3.3.0.20:
  * Pool: Timeouts will attempt to send SIGKILL, but this signal
    does not exist on Windows.  Replaced with SIGTERM.
- additional changes from version 3.3.0.19:
  * Pool: Exceptions in user timeout callbacks are now logged
    instead of crashing the pool. Contributed by Pierre Fersing.
  * Pool: Exit codes in errors were improperly being represented
    as signals.
  * Pool: ``.map``. and ``.imap`` now working again.
  * Now builds on FreeBSD 10. Contributed by Michael Fladischer.
- update project URL
- add fdupes as BuildRequires and call it after install
- remove BuildRequires python-nose-cover3, not needed by the tests
  anymore
- set a minimum version for python-nose
- remove unwanted shebang of funtests/setup.py
- add -fno-strict-aliasing to CFLAGS to avoid potential breakage</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1452686400">- Update to version 3.3.0.22:
  * Wheel packages for Windows now available.
- Changes from 3.3.0.21:
  * Pool: Fixed semaphore error on Python3.
  * Fixed libSystem error on OS X El Capitan.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1498478400">- update to version 3.5.0.2:
  * max_memory_per_child was measured in kilobytes on Linux, but
    bytes on *BSD/MacOS, it's now always kilobytes.
  * Windows: Adds support for max_memory_per_child, but requires
    the psutil package to be installed.
  * Fixed bug in ForkingPickler.loadbuf, where it tried to pass
    a BytesIO instance directly to ``pickle.loads`` on Python 2.7.
- additional changes from version 3.5.0.1:
  * Connection: Properly handle EINTR (Issue #191).
  * Fixed bug with missing CreateProcess for Windows on Python 2.7.
  * Adds Process._counter for compatibility with Python &lt;3.5.
- additional changes from version 3.5.0.0:
  * No longer supports Python 2.6
    You need Python 2.7 or later to use this version of billiard.
  * Merged changes from CPython 3.5
- convert the package to singlespec and import changes from
  python3-billiard
- change the source URL to pythonhosted.org
- update the BuildRequires for test:
  * remove mock, nose and unittest2
  * add case and pytest
- split the documentation to a separate package
- remove the shebang cleanup: not needed anymore</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Fix the build again
- Fix the fdupes call
- Update version to 3.5.0.5: (boo#1136100)
  * Various small bugfixes all around</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1549800000">- Update to v3.6.0.0
  + Add support of sending parent process death signal.
  + Previous fix for handling timeouts caused a problem in warm shutdowns
    due to use of deepcopy.
    We now use a shallow copy of the cache and do so only when it is needed.
  + Cleanup old checks and workarounds for Python versions we no longer support.</changelog>
</package>
<package pkgid="1078b9b6e228f316f192b2304f638590a1ccbedf55bb1a743d5b5cb90b458554" name="python2-gitlint" arch="noarch">
  <version epoch="0" ver="0.11.0" rel="lp151.3.3.1"/>
  <changelog author="okurz@suse.com" date="1489060800">- Initial submission</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Install LICENSE as well
- Use update alternatives
- Drop parts of description which are not relevant to package</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562068800">- Update to v0.11.0
  * add relax-requirements.patch to make it work with openSUSE</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562241600">- Correct download target URL and fix relax-requirements.patch</changelog>
</package>
<package pkgid="68212b60c8deeea12c9c831b201c2296f90b3cfa0f211dccbb058457afcdcad8" name="python2-libguestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="956dbab62b4bae574ec50f52e24d46287b17f58fc609ca77b77eb7f3467e0859" name="python2-relatorio" arch="noarch">
  <version epoch="0" ver="0.8.1" rel="lp151.3.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1436529600">- Version 0.6.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1442664000">- version 0.6.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1467288000">- version 0.6.3
  changed naming of .changes file</changelog>
  <changelog author="axel.braun@gmx.de" date="1471176000">- fixed link to pypi</changelog>
  <changelog author="axel.braun@gmx.de" date="1472126400">- LICENSE file added</changelog>
  <changelog author="axel.braun@gmx.de" date="1482062400">- version 0.6.4
  * Use StringIO instead of BytesIO for TextSerializer result</changelog>
  <changelog author="axel.braun@gmx.de" date="1488974400">- changes for singlespec</changelog>
  <changelog author="axel.braun@gmx.de" date="1501416000">- Version 0.7.0
  * Replace hard-coded extensions by mimetypes guess
  * Add more guess types: 'boolean', 'date', 'time' and 'void'
  * Add support for Flat OpenDocument</changelog>
  <changelog author="axel.braun@gmx.de" date="1508500800">- Version 0.7.1 - Bugfix release
  * Remove warning when import plugin fails
  * Apply the guess type function on the correct node
  * Fix guess_type for date and datetime</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- version 0.8.0
  * Do not guess_type on styled cell content
  * Remove type attributes when guessing type
  * Add support for Python 3.6
  * Remove soft-page-break
  * tests added to spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1512993600">- Explain why the tests are conditioned around
- Specify all the runtime dependencies based on setup.py</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1538568000">- version 0.8.1
  * Add support for Python 3.7
  * Escape invalid XML characters
  * Enforce closing tag to be the same directive as the opening
  * Use compression for zip file
  * Write mimetype as first file of the zip file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562328000">- python-magic added to requirements</changelog>
</package>
<package pkgid="3bb385bd599be494b6af66d10a6e7a4b0143f87825c2e70dca3d002c677dc830" name="python2-requests" arch="noarch">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="1ffdd27b0251feb2063c8e35088330fcfea60cc2b680313ff1a92709d4137255" name="python2-requests-test" arch="noarch">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="dca8748ae4fe3eada2ca1b86ab8bb334b3c25b67311151c80357039ab29650ed" name="python2-salt" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="e8bdf8b97d2b3e213326d3cdeebcbbe460974bd327f264407bed82e88bb9aba4" name="python2-shaptools" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First package version</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Fix UT to check the inst formatting correctly
- Move the comment to the right place
- Enforce the HANA instance nr format.
- Forces Intance nr always with 2 positions filled with 0
- Forces right formating on HANA OS admin user.</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.</changelog>
  <changelog author="dakechi@suse.com" date="1551873600">- Fix the package license to be in synch with repo license.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556020800">- Remove enum34 dependency from code</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update SR registration process. Now the methods retries the
  registration command until a successful return and copies the
  SSFS files from the primary node as well</changelog>
  <changelog author="Ayoub Belarbi (abelarbi@suse.com)" date="1559131200">- Update hdb connector to return metadata besides the query
  records.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559649600">- Create package version 0.2.0 with the latest changes</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available from SLE12-SP2 to SLE15 versions
  (jsc#SLE-4031, jsc#SLE-4143, boo#1137989)</changelog>
</package>
<package pkgid="c7303a2c919af13cb21fecf366bae1a7c43d1dc6d748ab71e5904a157245ee2f" name="python2-targetcli-fb" arch="noarch">
  <version epoch="0" ver="2.1.49" rel="lp151.2.3.1"/>
  <changelog author="lduncan@suse.com" date="1461067200">- Creating from latest upstream version 2.1.fb43</changelog>
  <changelog author="lduncan@suse.com" date="1469448000">-  updated spec file: removed Provides/Obsoletes of
  targetcli and python-targetcli, and added
  Conflicts with targetcli (bsc#986475)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Trim macro indirections and empty macros</changelog>
  <changelog author="hare@suse.com" date="1492084800">- Update to version 2.1.fb46 (bsc#1032833):
  * version 2.1.fb44
  * Remove build scripts for RPM and Debian packages
  * Add Gentoo to the list of distributions that ship targetcli-fb
  * Add support to create/delete ALUA groups on a storage object
  * Add support to set/get a LUN's ALUA group
  * version 2.1.fb45
  * Create ALUA dir and def group in UI with storage object
  * Clear backstore cache on refresh
  * version 2.1.fb46</changelog>
  <changelog author="lszhu@suse.com" date="1502971200">- Update to version 2.1.fb47
  * Improving ALUA and TCMU support, as well as moving the default
  directory for APTPL files from /var/target to /etc/target,
  for better FHS compliance.</changelog>
  <changelog author="lduncan@suse.com" date="1513339200">- Moved targetcli-fb-2.1.fb47.tar.gz to targetcli-fb-2.1.fb47.tar.xz,
  after appropriate decompression/compression, to match SPEC and
  _service file. Updated _servicedata to match.</changelog>
  <changelog author="lduncan@suse.com" date="1513339201">- Ran "spec-cleaner" over the SPEC file, to clean it up, before
  support for Python3 is added.</changelog>
  <changelog author="lduncan@suse.com" date="1515067200">- Converted RPM SPEC file to singlepsec format (bsc#1045332),
  updating SPEC file only. This breaks this package into two
  packages. The new base package is called targetcli-fb-common,
  and does not depend on the python version. The other package
  is python-version dependent, and is called either
  python2-targetcli-fb or python3-targetcli-fb, dpending on
  which version of Python you wish to use.</changelog>
  <changelog author="lduncan@suse.com" date="1515067201">- Added dependency on dbus package to SPEC file (bsc#1073913)</changelog>
  <changelog author="lduncan@suse.com" date="1516017600">- Removed duplicate BuildRequires line, and add Conflicts for
  sub-package</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- Fix upgrade path by provide/obsolete version-release</changelog>
  <changelog author="olaf@aepfle.de" date="1519560000">- Fix upgrade path by provide/obsolete targetcli/targetcli-fb (bsc#1082693)</changelog>
  <changelog author="ddiss@suse.com" date="1523361600">- Automatically generate version string from upstream tag
  + Retain current fb-removed version format used
  + Rename targetcli-fb-2.1.fb47.tar.xz to targetcli-fb-2.1.47.tar.xzar.xz
    and cleanup hardcoded duplicate name/version values in spec</changelog>
  <changelog author="ddiss@suse.com" date="1523448000">- Merge RBD support from non-fb version (bsc#1079329)
  + Split-out-blockdev-readonly-state-detection-helper.patch
  + rbd-support.patch (SLE/Leap only, due to LIO kernel dependency)
  + Add explicit Provides for "python-rtslib-rbd"
- Detect write-protected block devices (bsc#1070815)
  + Auto-detect-readonly-state-for-iblock-devices.patch
  + Use-signed-char-instead-of-char.patch</changelog>
  <changelog author="lduncan@suse.com" date="1524225600">- Only save current config to backup if current
  config exists (bsc#1090424), adding patch:
  * targetcli-only-save-old-config-if-present.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539864000">- Update to version 2.1.49:
  * version 2.1.fb49
  * targetcli-fb: Add support for media change
  * fix the parameter of define_config_group_param
  * saveconfig: handle backups with block-level delete
  * saveconfig: way for block-level save with delete command
  * create: add a way to set control string
  * fix amount of backup files in backup dir
  * config: add saveconfig command to StorageObject level
  * Allow to customize a home directory
  * Fix default max_backup_files in ui_command_saveconfig
  * MappedLuns and Luns max number is not the same anymore
  * Use signed char instead of char
  * version 2.1.fb48
  * remove wrong exit code from targetcli --version
  * backup: global option to tune max no. of backup conf files
  * config: rename key 'kept_backups' as 'max_backup_files'
  * config: backup when current config is different from recent backup copy
  * config: defend on '/etc/target/backup' directory
  * Auto-detect readonly state for iblock devices
  * Read number of backup files to keep from file
  * skip refreshing user backed storage object when it is null
  * Replace dbus-python with GObject Introspection
  This replaces targetcli-fb-2.1.47.tar.xz with targetcli-fb-2.1.49.tar.xz,
  and removes the following patches:
  * Auto-detect-readonly-state-for-iblock-devices.patch
  * Use-signed-char-instead-of-char.patch
  * targetcli-only-save-old-config-if-present.patch
  and updates the SPEC file.</changelog>
  <changelog author="ddiss@suse.com" date="1544184000">- Enable RBD support for SLE/Leap 15+ (bsc#1118516)</changelog>
  <changelog author="lduncan@suse.com" date="1549540800">- Ensure this package and the deprecated lio-utils package
  do not run at the same time, in a sane way (bsc#1123423),
  updating the source file targetcli-fb.service. Also, updated
  the SPEC file with new year, updated URL, and http-&gt;https.</changelog>
  <changelog author="ddiss@suse.com" date="1554292800">- support emulate_pr attribute changes (bsc#1121998)
  + Add-emulate_pr-backstore-attribute.patch</changelog>
</package>
<package pkgid="9bb1f78e2cebe3b6ef0435ca44dcb2f1aa58858222e98ae1f90f6d7b91e7437a" name="python2-tzlocal" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp151.3.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1415188800">- inital commit</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275200">- added required pytz dependency
- enhanced truncated description and add URL to source</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275201">- corrected license
- added check section with python test</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Reworked spec file
  * Bump version
  * Use github upstream url
  * Improve description and summary
  * Use tarball instead of zip
  * Minimize %files section</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436788800">- Fix building on SLES 11</changelog>
  <changelog author="ms@suse.com" date="1442232000">- Package required in SLE12 due to fate#319400</changelog>
  <changelog author="rjschwei@suse.com" date="1499774400">- Convert to singlespec build</changelog>
  <changelog author="bear454@opensuse.org" date="1503921600">- Update to version 1.4
  - Relicensed upstream as MIT
  - Dropping support for Python versions 2.5, 3.1, 3.2
  - adding support for Python 3.6
  - Closes stdout and stderr to get rid of ResourceWarnings
  - Added support for /var/db/zoneinfo
  - Tests failed if TZ was set in the environment.
  - Replaces os.popen() with subprocess.Popen()
  - Systemd stores no time zone name, forcing us to look at the
    name of the file that localtime symlinks to.</changelog>
  <changelog author="sean.marlow@suse.com" date="1506945600">- Update source tarball location.</changelog>
  <changelog author="Boris Manojlovic &lt;boris@steki.net&gt;" date="1559736000">- fix fdupes handling as it was linking python2 source into python3
  package breaking it boo#1137352</changelog>
</package>
<package pkgid="09158f10952cdb334f7ee4d91e2c931b17aef1998bcdaedbe1e3615c200a621a" name="python3-Django" arch="noarch">
  <version epoch="0" ver="2.2.4" rel="lp151.2.3.1"/>
  <changelog author="tbechtold@suse.com" date="1521460800">- update to 2.0.3 (bsc#1083305, bsc#1083304, CVE-2018-7536, CVE-2018-7537):
  * Fixed #29108 -- Fixed crash in aggregation of distinct+ordered+sliced querysets.
  * Added CVE-2018-6188 to the security release archive.
  * Post-release version bump.
  * Updated translations from Transifex
  * Added stub release notes for security releases.
  * Fixed incorrect regex in re_path() example.
  * Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments.
  * Fixed #29126 -- Doc'd the behavior of QuerySet.update_or_create() with manually specified pks.
  * Used a CSS positioning in tutorial 6 that doesn't differ across browsers.
  * Fixed typo in bulk_create() documentation.
  * Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string.
  * Removed blank lines per isort 4.3.0.
  * Added stub release notes for 2.0.3.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Fixed #29172 -- Fixed crash with Window expression in a subquery.
  * Fixed #29166 -- Fixed crash in When() expression with a list argument.
  * Fixed #24270 -- Doc'd that django_bash_completion is only in the source distribution.
  * Improved clarity of docs/topics/install.txt.
  * Refs #29125 -- Made Q.deconstruct() omit 'query_utils' in the path and _connector='AND' since it's a default value.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 2.0.3 release.
  * Corrected doc'd type of some parameters from string to str.
  * Fixed #29146 -- Readded ^ and $ inadvertently removed from re_path() examples.
  * Fixed #29107 -- Doc'd that ModelForm doesn't actually inherit from Form.
  * Switched test requirement to new psycopg2-binary package.
  * Added backticks around obj argument in admin docs.
  * Fixed typo in docs/topics/forms/media.txt.
  * Fixed #29109 -- Fixed the admin time picker widget for the Thai locale.
  * Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)).</changelog>
  <changelog author="tbechtold@suse.com" date="1523102400">- update to version 2.0.4:
  * Fixed #29265 -- Removed the suggestion to hardcode static URLs.
  * Fixed #29206 -- Fixed PasswordResetConfirmView crash when the URL contains a non-UUID where one is expected.
  * Fixed #29195 -- Fixed Exists.output_field resolution on single-valued queries.
  * Fixed links to Sphinx docs.
  * Fixed typo in docs/releases/2.0.4.txt.
  * Clarified docs about ISO 8601 week numbering.
  * Fixed #29116 -- Fixed OpenLayersWidget deserialization ignoring the widget map's SRID.
  * Added CVE-2018-7536,7 to the security release archive.
  * Fixed #29221 -- Corrected admin's autocomplete widget to add a space after custom classes.
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Added a pagination example to ListView docs.
  * Fixed #28514 -- Clarifed docs about idempotence of RelatedManager.add().
  * isorted import statements in tutorial example.
  * Fixed #29192 -- Corrected docs regarding overriding fields from abstract base classes.
  * Refs #11278 -- Clarified RelatedManager differences between reverse one-to-many and many-to-many relations.
  * Added stub release notes for 1.11.12.
  * Fixed #29165 -- Clarified how to load initial data with migrations.
  * Fixed #29213 -- Fixed autocomplete widget's translations for zh-hans/zh-hant.
  * Reverted "Expanded docs for AbstractBaseUser.has_usable_password()."
  * Fixed typo in docs/releases/2.0.4/1.11.12.txt.
  * Bumped version for 2.0.4 release.
  * Fixed #29250 -- Added 'django_version' context to startapp/project docs.
  * Added release date for 2.0.4 and 1.11.12.
  * Post-release version bump.
  * Clarified a sentence in docs/topics/i18n/translation.txt.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 2.0.4.
  * Fixed a couple mistakes in docs/ref/forms/widgets.txt.
  * Fixed #28655 -- Added more examples for customizing widgets in a form.</changelog>
  <changelog author="aplanas@suse.com" date="1530532800">- update to version 2.0.7:
  * Fixed admin changelist crash when using a query expression without
    asc() or desc() in the page?s ordering (#29428).
  * Fixed admin check crash when using a query expression in
    ModelAdmin.ordering (#29428).
  * Fixed __regex and __iregex lookups with MySQL 8 (#29451).
  * Fixed migrations crash with namespace packages on Python 3.7
    (#28814).
- update to version 2.0.6
  * Fixed a regression that broke custom template filters that use
    decorators (#29400).
  * Fixed detection of custom URL converters in included patterns
    (#29415).
  * Fixed a regression that added an unnecessary subquery to the GROUP
    BY clause on MySQL when using a RawSQL annotation (#29416).
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS
    3.6.1+ (#29460).
  * Fixed a regression in Django 1.10 that could result in large
    memory usage when making edits using ModelAdmin.list_editable
    (#28462).
- update to version 2.0.5
  * Corrected the import paths that inspectdb generates for
    django.contrib.postgres fields (#29307).
  * Fixed a regression in Django 1.11.8 where altering a field with a
    unique constraint may drop and rebuild more foreign keys than
    necessary (#29193).
  * Fixed crashes in django.contrib.admindocs when a view is a
    callable object, such as django.contrib.syndication.views.Feed
    (#29296).
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or
    values_list() after combining an annotated and unannotated
    queryset with union(), difference(), or intersection() crashed due
    to mismatching columns (#29286).</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533729600">- update to version 2.1
- move bash completion to right location
- for full chanfges please see https://docs.djangoproject.com/en/2.1/releases/2.1/
  * Dropped support for MySQL 5.5
  * Dropped support for PostgreSQL 9.3
  * Support for SpatiaLite 4.0 is removed
  * Support for SQLite &lt; 3.7.15 is removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1533729601">- Enable testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1534248000">- Apply patch to fix urlencode nonstring values:
  * django-urlencode.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1536062400">- update to version 2.1.1
- drop django-urlencode.patch
  * Fixed a race condition in QuerySet.update_or_create() that could result
    in data loss
  * Fixed a regression where QueryDict.urlencode() crashed if the dictionary
    contains a non-string value
  * Fixed a regression in Django 2.0 where using manage.py test --keepdb fails
    on PostgreSQL if the database exists and the user doesn?t have permission
    to create databases
  * Fixed a regression in Django 2.0 where combining Q objects with __in
    lookups and lists crashed
  * Fixed translation failure of DurationField?s ?overflow? error message
  * Fixed a regression where the admin change form crashed if the user doesn?t
    have the ?add? permission to a model that uses TabularInline
  * Fixed a regression where a related_query_name reverse accessor wasn?t
    set up when a GenericRelation is declared on an abstract base model
  * Fixed the test client?s JSON serialization of a request data dictionary
    for structured content type suffixes
  * Made the admin change view redirect to the changelist view after a POST
    if the user has the ?view? permission
  * Fixed admin change view crash for view-only users if the form
    has an extra form field
  * Fixed a regression in Django 2.0.5 where QuerySet.values() or values_list()
    after combining querysets with extra() with union(), difference(),
    or intersection() crashed due to mismatching columns</changelog>
  <changelog author="Mat?j Cepl &lt;mcepl@suse.com&gt;" date="1537272000">- Switch of BR selenium for non-Intel platforms.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1538654400">- Update to version 2.1.2
  * CVE-2018-16984: Password hash disclosure to ?view only? admin
    users
  * Fixed a regression where nonexistent joins in F() no longer raised
    FieldError (#29727).
  * Fixed a regression where files starting with a tilde or underscore
    weren?t ignored by the migrations loader (#29749).
  * Made migrations detect changes to Meta.default_related_name
    (#29755).
  * Added compatibility for cx_Oracle 7 (#29759).
  * Fixed a regression in Django 2.0 where unique index names weren?t
    quoted (#29778).
  * Fixed a regression where sliced queries with multiple columns with
    the same name crashed on Oracle 12.1 (#29630).
  * Fixed a crash when a user with the view (but not change)
    permission made a POST request to an admin user change form
    (#29809).</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1544443200">- Update to version 2.1.4
  * Corrected the default password list that CommonPasswordValidator uses
    by lowercasing all passwords to match the format expected by the validator
  * Prevented repetitive calls to geos_version_tuple() in the WKBWriter class in
    an attempt to fix a random crash involving LooseVersion
  * Fixed keep-alive support in runserver after it was disabled o 2.0
  * Fixed admin view-only change form crash when using ModelAdmin.prepopulated_fields
  * Fixed ?Please correct the errors below? error message when editing an object
    in the admin if the user only has the ?view? permission on inlines
  * Fixed a regression in Django 2.0 where combining Q objects with __in lookups
    and lists crashed
  * Fixed a regression in Django 2.0 where test databases aren?t reused
    with manage.py test --keepdb on MySQL
  * Fixed a regression where cached foreign keys that use to_field were
    incorrectly cleared in Model.save()
  * Fixed a regression in Django 2.0 where FileSystemStorage crashes
    with FileExistsError if concurrent saves try to create the same directory</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1547121600">- update to 2.1.5 (CVE-2019-3498, bsc#1120932):
  * CVE-2019-3498: Content spoofing possibility in the default 404 page
  * Fixed compatibility with mysqlclient 1.3.14 (#30013).
  * Fixed a schema corruption issue on SQLite 3.26+. You might have to drop
    and rebuild your SQLite database if you applied a migration while using
    an older version of Django with SQLite 3.26 or later (#29182).
  * Prevented SQLite schema alterations while foreign key checks are enabled
    to avoid the possibility of schema corruption (#30023).
  * Fixed a regression in Django 2.1.4 (which enabled keep-alive connections)
    where request body data isn?t properly consumed for such
    connections (#30015).
  * Fixed a regression in Django 2.1.4 where
    InlineModelAdmin.has_change_permission() is incorrectly called with
    a non-None obj argument during an object add (#30050).</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1549972800">- update to 2.1.7 (CVE-2019-6975, bsc#1124991):
  * Corrected packaging error from 2.1.6
  * Memory exhaustion in django.utils.numberformat.format()
    If django.utils.numberformat.format() ? used by contrib.admin as well
    as the the floatformat, filesizeformat, and intcomma templates
    filters ? received a Decimal with a large number of digits or a
    large exponent, it could lead to significant memory usage
    due to a call to '{:f}'.format().
    To avoid this, decimals with more than 200 digits are now formatted
    using scientific notation.
  * Made the obj argument of InlineModelAdmin.has_add_permission() optional
    to restore backwards compatibility with third-party code that doesn?t
    provide it</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553342400">- Add patch to build with PyYAML &gt;5:
  * pyyaml5.patch</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1554292800">- update to 2.2
- drop pyyaml5.patch
- add i18n_test.patch
  * HttpRequest.headers to allow simple access to a request?s headers.
  * Database-level constraints on models.
  * Watchman compatibility for runserver to improve the performance</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1554897600">- Add test_clear_site_cache-sort.patch to workaround flaky test
- Add bcond_with for selenium and memcached, as those tests are inactive,
  and add missing dependencies and setup for selenium testing
- Move removal of executable bit from a JavaScript file to %prep
- Fix fdupes</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1557144000">- Update to 2.2.1
  * Fixed a regression in Django 2.1 that caused the incorrect quoting
    of database user password when using dbshell on Oracle (#30307).
  * Added compatibility for psycopg2 2.8 (#30331).
  * Fixed a regression in Django 2.2 that caused a crash when loading
    the template for the technical 500 debug page (#30324).
  * Fixed crash of ordering argument in ArrayAgg and StringAgg when it
    contains an expression with params (#30332).
  * Fixed a regression in Django 2.2 that caused a single instance
    fast-delete to not set the primary key to None (#30330).
  * Prevented makemigrations from generating infinite migrations for
    check constraints and partial indexes when condition contains a
    range object (#30350).  Reverted an optimization in Django 2.2
    (#29725) that caused the inconsistent behavior of count() and
    exists() on a reverse many-to-many relationship with a custom
    manager (#30325).
  * Fixed a regression in Django 2.2 where Paginator crashes if
    object_list is a queryset ordered or aggregated over a nested
    JSONField key transform (#30335).
  * Fixed a regression in Django 2.2 where IntegerField validation of
    database limits crashes if limit_value attribute in a custom
    validator is callable (#30328).
  * Fixed a regression in Django 2.2 where SearchVector generates SQL
    that is not indexable (#30385).
  * Fixed a regression in Django 2.2 that caused an exception to be
    raised when a custom error handler could not be imported (#30318).
  * Relaxed the system check added in Django 2.2 for the admin app?s
    dependencies to reallow use of SessionMiddleware subclasses,
    rather than requiring django.contrib.sessions to be in
    INSTALLED_APPS (#30312).
  * Increased the default timeout when using Watchman to 5 seconds to
    prevent falling back to StatReloader on larger projects and made
    it customizable via the DJANGO_WATCHMAN_TIMEOUT environment
    variable (#30361).
  * Fixed a regression in Django 2.2 that caused a crash when
    migrating permissions for proxy models if the target permissions
    already existed. For example, when a permission had been created
    manually or a model had been migrated from concrete to proxy
    (#30351).
  * Fixed a regression in Django 2.2 that caused a crash of runserver
    when URLConf modules raised exceptions (#30323).
  * Fixed a regression in Django 2.2 where changes were not reliably
    detected by auto-reloader when using StatReloader (#30323).
  * Fixed a migration crash on Oracle and PostgreSQL when adding a
    check constraint with a contains, startswith, or endswith lookup
    (or their case-insensitive variant) (#30408).
  * Fixed a migration crash on Oracle and SQLite when adding a check
    constraint with condition contains | (OR) operator (#30412).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update keyring file</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1559563200">- update to 2.2.2
  * Fixes CVE-2019-12308: AdminURLFieldWidget XSS (bsc#1136468)
  * Fixes CVE-2019-11358: Prototype pollution</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563451200">- Update to 2.2.3:
  * CVE-2019-12781 (bsc#1139945): Incorrect HTTP detection with reverse-proxy connecting via HTTPS</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564660800">- Update to 2.2.4:
  * CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
    bsc#1142883 bsc#1142885 bsc#1142882 bsc#1142880
  * Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used (#30628).
  * Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type (#30621).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00') (#30506).
  * Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved (#30647).</changelog>
</package>
<package pkgid="f5d8080d1309f3cd9de45f8845058a2d913bc8f295aab1f2a87b62e1685b4f3c" name="python3-M2Crypto" arch="i586">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="3cddaf2ae53f24bb6980a3999f08d161baf2852b1620333a58dc7f61226e4dc5" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.28.2" rel="lp151.3.3.1"/>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch)</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1464955200">- update to 0.24.0
  * No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- update to 0.25.1
- set new dependency on package python-typing</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- use pypi.io as Source URL</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 0.26.0
  * No changelog provided
- Implement single-spec version.</changelog>
  <changelog author="alarrosa@suse.com" date="1493208000">- Provide python-m2crypto in the python2 package</changelog>
  <changelog author="alarrosa@suse.com" date="1493294400">- Add python-typing as a dependency</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- It doesn't look like python3-m2crypto ever existed, so don't
  provide it.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1497873600">- only require python3-typing if necessary</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- Update to 0.26.2
  * compatibility with OpenSSL 1.1.0</changelog>
  <changelog author="michael@stroeder.com" date="1506081600">- Update to 0.26.3 with fix for a syntax error</changelog>
  <changelog author="michael@stroeder.com" date="1506427200">- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518264000">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
</package>
<package pkgid="0bea1da32d97d15dc2078a98659a2cbde093851f02bb094a7e5de46e8779405f" name="python3-Twisted" arch="i586">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="c17519687bdb2fb92a565cff0df28761d8056c4fb257549b131f0b4ffd3bcbc3" name="python3-Twisted" arch="x86_64">
  <version epoch="0" ver="17.9.0" rel="lp151.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1426334400">- Version 15.0.0:
  + please, see NEWS file
- Update lp1102685.diff</changelog>
  <changelog author="jmatejek@suse.cz" date="1431000000">- Version 15.1.0:
  * deprecated MSN protocol support
  * improved docs for Trial
  * removed deprecated UDPClient
  * twisted.web.static.File allows defining a custom resource for
    rendering forbidden pages.
  * minor bugfixes</changelog>
  <changelog author="termim@gmail.com" date="1432900800">- Add missing dependencies on python-asn1 and python-Crypto
- Update to version 15.2.1:
  * twisted.logger now marks the `isError` key correctly on legacy
    events generated by writes to stderr. (#7903)
  * twisted.logger's documentation is now correctly listed in the table
    of contents. (#7904)
- Changes from version 15.2.0:
  * twisted.internet.process has now been ported to Python 3. (#5987)
  * twisted.cred.credentials is now ported to Python 3. (#6176)
  * twisted.trial.unittest.TestCase's assertEqual, assertTrue, and
    assertFalse methods now pass through the standard library's more
    informative failure messages. (#6306)
  * The new package twisted.logger provides a new, fully tested, and
    feature-rich logging framework. The old module twisted.python.log
    is now implemented using the new framework. The new logger HOWTO
    documents the new framework. (#6750)
  * twisted.python.modules is now ported to Python 3. (#7804)
  * twisted.python.filepath.FilePath now supports Unicode (text) paths.
    Like the os module, instantiating it with a Unicode path will
    return a Unicode-mode FilePath, instantiating with a bytes path
    will return a bytes-mode FilePath. (#7805)
  * twisted.internet.kqreactor is now ported to Python 3 (#7823)
  * twisted.internet.endpoints.ProcessEndpoint is now ported to Python
    3. (#7824)
  * twisted.python.filepath.FilePath now has asBytesMode and asTextMode
    methods which return a FilePath in the requested mode. (#7830)
  * twisted.python.components.proxyForInterface now creates method
    proxies that can be used with functools.wraps. (#7832)
  * The tls optional dependency will now also install the idna package
    to validate idna2008 names. (#7853)
  * Don't raise an exception if `DefaultLogObserver.emit()` gets an
    event with a message that raises when `repr()` is called on it.
    Specifically: use `textFromEventDict()` instead of a separate (and
    inferior) message rendering implementation. (#6569)
  * twisted.cred.credentials.DigestedCredentials incorrectly handled
    md5-sess hashing according to the RFC, which has now been fixed.
    (#7835)
  * Fixed an issue with twisted.internet.task.LoopingCall.withCount
    where sometimes the passed callable would be invoked with "0" when
    we got close to tricky floating point boundary conditions. (#7836)
  * twisted.internet.defer now properly works with the new logging
    system. (#7851)
  * Change `messages` key to `log_io` for events generated by
    `LoggingFile`. (#7852)
  * twisted.logger had literal characters in docstrings that are now
    quoted. (#7854)
  * twisted.logger now correctly formats a log event with a key named
    `message` when passed to a legacy log observer. (#7855)
  * twisted.internet.endpoints.HostnameEndpoint now uses getaddrinfo
    properly on Python 3.4 and above. (#7886)
  * Fix a typo in narrative documentation for logger (#7875)
  * tkunzip and tapconvert in twisted.scripts were deprecated in 11.0
    and 12.1 respectively, and are now removed. (#6747)
  * twisted.protocols.gps is deprecated in preference to
    twisted.positioning. (#6810)
  * twisted.scripts.tap2deb and twisted.scripts.tap2rpm are now
    deprecated. (#7682)
  * twisted.trial.reporter.TestResult and
    twisted.trial.reporter.Reporter contained deprecated methods (since
    8.0) which have now been removed. (#7815)
  * #6027, #7287, #7701, #7727, #7758, #7776, #7786, #7812, #7819,
    [#7831], #7838, #7865, #7866, #7869, #7872, #7877, #7878, #7885
  * twisted.conch.ssh.forwarding now supports local-&gt;remote forwarding
    of IPv6 (#7751)
  * twisted.mail.smtp.sendmail now uses ESMTP. It will
    opportunistically enable encryption and allow the use of
    authentication. (#7257)
  * twisted.web.static is now ported to Python 3. (#6177)
  * twisted.web.server.Site accepts requestFactory as constructor
    argument. (#7016)
  * twisted.web.util had some HTML generation functions deprecated
    since 12.1 that have now been removed. (#7828)
  * #6927, #7797, #7802, #7846
  * The resumeOffset argument to
    twisted.words.protocol.irc.DccFileReceive now works as it is
    documented. (#7775)</changelog>
  <changelog author="termim@gmail.com" date="1433419200">- Wrong dependency rpm name, should be python-pycrypto</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1439294400">- change dep from python-asn1 to python-pyasn1 (renamed long ago)</changelog>
  <changelog author="termim@gmail.com" date="1442059200">- Update to version 15.4.0
  * add dependency on setuptools
  * lore removed
  * please see the NEWS file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651200">- Implement update-alternatives in preparation for python 3 version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444651201">- Make "trial" the master file for update-alternatives, since it
  is the only one that supports python 3 so far.</changelog>
  <changelog author="termim@gmail.com" date="1449057600">- Update to version 15.5.0
  * This is the last Twisted release where Python 2.6 is supported, on
    any platform. Python 3.5 (on POSIX) support has been added.
  * This release introduces changes that are required for Conch's SSH
    implementation to work with OpenSSH 6.9+ servers.
  * twisted.python.url is a new abstraction for URLs, supporting RFC
    3987 IRIs. (#5388)
  * twisted.python.logfile is now ported to Python 3. (#6749)
  * twisted.python.zippath has been ported to Python 3. (#6917)
  * twisted.internet.ssl.CertificateOptions and
    twisted.internet.ssl.optionsForClientTLS now take a
    acceptableProtocols parameter that enables negotiation of the next
    protocol to speak after the TLS handshake has completed. This field
    advertises protocols over both NPN and ALPN. Also added new
    INegotiated interface for TLS interfaces that support protocol
    negotiation. This interface adds a negotiatedProtocol property that
    reports what protocol, if any, was negotiated in the TLS handshake.
    (#7860)
  * twisted.python.urlpath.URLPath now operates correctly on Python 3,
    using bytes instead of strings, and introduces the fromBytes
    constructor to assist with creating them cross-version. (#7994)
  * twisted.application.strports is now ported to Python 3. (#8011)
  * twistd (the Twisted Daemon) is now ported to Python 3. (#8012)
  * Python 3.5 is now supported on POSIX platforms. (#8042)
  * twisted.internet.serialport is now ported on Python 3. (#8099)
  * twisted.logger.formatEvent now can format an event if it was
    flattened (twisted.logger.eventAsJSON does this) and has text after
    the last replacement field. (#8003)
  * twisted.cred.checkers.FilePasswordDB now logs an error if the
    credentials db file does not exist, no longer raises an unhandled
    error. (#8028)
  * twisted.python.threadpool.ThreadPool now properly starts enough
    threads to do any work scheduled before ThreadPool.start() is
    called, such as when work is scheduled in the reactor via
    reactor.callInThread() before reactor.run(). (#8090)
  * Twisted Development test standard documentation now contain
    information about avoiding test data files. (#6535)
  * The documentation for twisted.internet.defer.DeferredSemaphore now
    describes the actual usage for limit and tokens instance
    attributes. (#8024)
  * twisted.python._initgroups, a C extension, has been removed and
    stdlib support is now always used instead. (#5861)
  * Python 2.6 is no longer supported. (#8017)
  * twisted.python.util.OrderedDict is now deprecated, and uses of it
    in Twisted are replaced with collections.OrderedDict. (#8051)
  * twisted.persisted.sob.load, twisted.persisted.sob.loadValueFromFile
    and twisted.persisted.sob.Persistent.save() are now deprecated when
    used with a passphrase. The encyption used by these methods are
    weak. (#8081)
  * twisted.internet.interfaces.IStreamClientEndpointStringParser has
    been removed and Twisted will no longer use parsers implementing
    this interface. (#8094)
  * #5976, #6628, #6894, #6980, #7228, #7693, #7731, #7997, #8046,
    [#8054], #8056, #8060, #8063, #8064, #8068, #8072, #8091, #8095,
    [#8096], #8098, #8106</changelog>
  <changelog author="termim@gmail.com" date="1472817600">- Update to version 16.4.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.4.0/NEWS
- Update to version 16.3.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.3.0/NEWS
- Update to version 16.2.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.2.0/NEWS
- Update to version 16.1.1
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.1/NEWS
- Update to version 16.1.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.1.0/NEWS
- Update to version 16.0.0
  For the complete list of changes plese see
  https://github.com/twisted/twisted/blob/twisted-16.0.0/NEWS</changelog>
  <changelog author="arun@gmx.de" date="1475064000">- specfile:
  * make twistd the update-alternative master, same as in the python3
    version (bnc #1001523)</changelog>
  <changelog author="okurz@suse.com" date="1488888000">- Change to singlespec approach</changelog>
  <changelog author="okurz@suse.com" date="1497700800">- Simplify alternatives handling
- Fix RPM warnings</changelog>
  <changelog author="jmatejek@suse.com" date="1498046400">- remove alternatives altogether in favor of versioned executables
- clean up spec file
- update to 17.5.0
  * too many changes to list, see full changelog in NEWS.rst</changelog>
  <changelog author="tbechtold@suse.com" date="1499169600">- Adjust Requires and BuildRequires
- Fix rpmlint warnings</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510315200">- update to 17.9.0
  For full list of changes please see:
  https://github.com/twisted/twisted/blob/twisted-17.9.0/NEWS.rst
  * mailman is only in python2 package</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1560340800">- Add 0001-Prevent-CRLF-injections-described-in-CVE-2019-12387.patch
  (bsc#1137825, CVE-2019-12387)
  Prevent CRLF injections</changelog>
</package>
<package pkgid="a28cdecb580a828328b5f2efb6c45d3db6ab82b301dfaa37804840be08b6ec8f" name="python3-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp151.6.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="f4c8b084e44403c3ac52d16863b0c46585a9dbfc7b32221ae29f56911fe518e2" name="python3-billiard" arch="noarch">
  <version epoch="0" ver="3.6.0.0" rel="lp151.3.3.1"/>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 3.3.0.6
  + Now works without C extension again.
  + New ``_billiard.read(fd, buffer, [len, ])` function
    implements os.read with buffer support (new buffer API)
  + New pure-python implementation of ``Connection.send_offset``.
- Changes from 3.3.0.5
  + All platforms except for Windows/PyPy/Jython now requires the C extension.
- Changes from 3.3.0.4
  + Fixed problem with Python3 and setblocking.
- Changes from 3.3.0.3
  + Now works on Windows again.
- Changes from 3.3.0.2
  + ApplyResult.terminate() may be set to signify that the job
    must not be executed.  It can be used in combination with
    Pool.terminate_job.
  + Pipe/_SimpleQueue: Now supports rnonblock/wnonblock arguments
    to set the read or write end of the pipe to be nonblocking.
  + Pool: Log message included exception info but exception happened
    in another process so the resulting traceback was wrong.
  + Pool: Worker process can now prepare results before they are sent
    back to the main process (using ``Worker.prepare_result``).
- Changes from 3.3.0.1
  + Pool: New ``correlation_id`` argument to ``apply_async`` can be
    used to set a related id for the ``ApplyResult`` object returned:
    &gt;&gt;&gt; r = pool.apply_async(target, args, kwargs, correlation_id='foo')
    &gt;&gt;&gt; r.correlation_id
    'foo'
  + Pool: New callback `on_process_exit` is called when a pool
    process exits, with signature ``(pid, exitcode)``.
  + Pool: Improved the too many restarts detection.
- Changes from 3.3.0.0
  + Dual code base now runs on Python 2.6+ and Python 3.
  + No longer compatible with Python 2.5
  + Includes many changes from multiprocessing in 3.4.
  + Now uses ``time.monotonic`` when available, also including
    fallback implementations for Linux and OS X.
  + No longer cleans up after receiving SIGILL, SIGSEGV or SIGFPE
  + ``Finalize`` and ``register_after_fork`` is now aliases to multiprocessing.
    It's better to import these from multiprocessing directly now
    so that there aren't multiple registries.
  + New `billiard.queues._SimpleQueue` that does not use semaphores.
  + Pool: Can now be extended to support using multiple IPC queues.
  + Pool: Can now use async I/O to write to pool IPC queues.
  + Pool: New ``Worker.on_loop_stop`` handler can be used to add actions
    at pool worker process shutdown.
    Note that, like all finalization handlers, there is no guarantee that
    this will be executed.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1385899200">- Update to version 3.3.0.8:
  + Now also sets ``multiprocessing.current_process`` for compatibility
    with loggings ``processName`` field</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- Update to 3.3.0.18
  - see https://pypi.python.org/pypi/billiard for complete changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1429963200">- update to version 3.3.0.20:
  * Pool: Timeouts will attempt to send SIGKILL, but this signal
    does not exist on Windows.  Replaced with SIGTERM.
- additional changes from version 3.3.0.19:
  * Pool: Exceptions in user timeout callbacks are now logged
    instead of crashing the pool. Contributed by Pierre Fersing.
  * Pool: Exit codes in errors were improperly being represented
    as signals.
  * Pool: ``.map``. and ``.imap`` now working again.
  * Now builds on FreeBSD 10. Contributed by Michael Fladischer.
- update project URL
- add fdupes as BuildRequires and call it after install
- remove BuildRequires python-nose-cover3, not needed by the tests
  anymore
- set a minimum version for python-nose
- remove unwanted shebang of funtests/setup.py
- add -fno-strict-aliasing to CFLAGS to avoid potential breakage</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1452686400">- Update to version 3.3.0.22:
  * Wheel packages for Windows now available.
- Changes from 3.3.0.21:
  * Pool: Fixed semaphore error on Python3.
  * Fixed libSystem error on OS X El Capitan.</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1498478400">- update to version 3.5.0.2:
  * max_memory_per_child was measured in kilobytes on Linux, but
    bytes on *BSD/MacOS, it's now always kilobytes.
  * Windows: Adds support for max_memory_per_child, but requires
    the psutil package to be installed.
  * Fixed bug in ForkingPickler.loadbuf, where it tried to pass
    a BytesIO instance directly to ``pickle.loads`` on Python 2.7.
- additional changes from version 3.5.0.1:
  * Connection: Properly handle EINTR (Issue #191).
  * Fixed bug with missing CreateProcess for Windows on Python 2.7.
  * Adds Process._counter for compatibility with Python &lt;3.5.
- additional changes from version 3.5.0.0:
  * No longer supports Python 2.6
    You need Python 2.7 or later to use this version of billiard.
  * Merged changes from CPython 3.5
- convert the package to singlespec and import changes from
  python3-billiard
- change the source URL to pythonhosted.org
- update the BuildRequires for test:
  * remove mock, nose and unittest2
  * add case and pytest
- split the documentation to a separate package
- remove the shebang cleanup: not needed anymore</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Fix the build again
- Fix the fdupes call
- Update version to 3.5.0.5: (boo#1136100)
  * Various small bugfixes all around</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1549800000">- Update to v3.6.0.0
  + Add support of sending parent process death signal.
  + Previous fix for handling timeouts caused a problem in warm shutdowns
    due to use of deepcopy.
    We now use a shallow copy of the cache and do so only when it is needed.
  + Cleanup old checks and workarounds for Python versions we no longer support.</changelog>
</package>
<package pkgid="9539de1bc054ca4642b4ea552ffa2f9a922aa030b35ca24b1aceaa492465e38d" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp151.11.3.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ab7eee1a363249f4d25404217f51da65ecb66165715d172a9d86a0c81b9255e0" name="python3-clang" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="92e7614e793abb180f5ad1a7ba09c9254ea748b103b441830105e8f5812f8645" name="python3-ec2metadata" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="lp151.2.1"/>
  <changelog author="rschweikert@suse.com" date="1401451200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1401451201">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Switch the upstream URL to the forked project, origin project
  appears not to be maintained</changelog>
  <changelog author="rschweikert@suse.com" date="1407931200">- Bump to version 1.5.2
  + fix the no argument use case</changelog>
  <changelog author="rjschwei@suse.com" date="1427803200">- Bump to version 1.5.3 (bnc#924626)
  + Properly write metadata to file if no query argument is provided
  + Properly generate XML for 'public-keys' query option
  + Document the 'api' option in the help message
  + Alpha sort the options displayed with the help message</changelog>
  <changelog author="jgleissner@suse.com" date="1471435200">- Bump to version 1.5.4 (bsc#994138 bsc#994139)
  + ec2metadata: do not use proxy</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Update to version 2.0.0
  + Port to Python 3</changelog>
</package>
<package pkgid="1c00a5030ba9ae1b2a4616def490b8900cc9f7979eb111297db505b1ce4ea528" name="python3-ec2metadata" arch="src">
  <version epoch="0" ver="2.0.0" rel="lp151.2.1"/>
  <changelog author="rschweikert@suse.com" date="1401451200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1401451201">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Switch the upstream URL to the forked project, origin project
  appears not to be maintained</changelog>
  <changelog author="rschweikert@suse.com" date="1407931200">- Bump to version 1.5.2
  + fix the no argument use case</changelog>
  <changelog author="rjschwei@suse.com" date="1427803200">- Bump to version 1.5.3 (bnc#924626)
  + Properly write metadata to file if no query argument is provided
  + Properly generate XML for 'public-keys' query option
  + Document the 'api' option in the help message
  + Alpha sort the options displayed with the help message</changelog>
  <changelog author="jgleissner@suse.com" date="1471435200">- Bump to version 1.5.4 (bsc#994138 bsc#994139)
  + ec2metadata: do not use proxy</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Update to version 2.0.0
  + Port to Python 3</changelog>
</package>
<package pkgid="423842d027c8c51fd1898eac33baf83d5cb43fe1dfe15364d6ed44ebee8f24e9" name="python3-gitlint" arch="noarch">
  <version epoch="0" ver="0.11.0" rel="lp151.3.3.1"/>
  <changelog author="okurz@suse.com" date="1489060800">- Initial submission</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Install LICENSE as well
- Use update alternatives
- Drop parts of description which are not relevant to package</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562068800">- Update to v0.11.0
  * add relax-requirements.patch to make it work with openSUSE</changelog>
  <changelog author="Rick Salevsky &lt;rick.salevsky@suse.com&gt;" date="1562241600">- Correct download target URL and fix relax-requirements.patch</changelog>
</package>
<package pkgid="d5ea64cc48aa16c04c97b1bc6f4d0467e16a0206703dba30a93f5dbbba628fb3" name="python3-ipa_hbac" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="53b210b8f2af70195c721a9ea9bebe528e22873013f63f1f553dbcbf679b68d4" name="python3-ipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="b79dae2a0d913ce73d2e55fe26bb4d127d5de79c3dd8ffda6f6ddef8123db1db" name="python3-libguestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="39d7fc132469113b3aa444df4f0928b487c300e4870f474def53d54e177424cb" name="python3-lldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="lp151.2.3.1"/>
  <changelog author="msrb@suse.com" date="1522929600">- Do not export Polly static libraries which we do not distribute.
  * Updated llvm-do-not-install-static-libraries.patch
- Use external jsoncpp instead of the bundled one.
  * Added polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- llvm6-devel must require llvm6-polly-devel
  * Files in llvm6-devel reference Polly.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="tchvatal@suse.com" date="1526558400">- Add patch llvm6-fix-InstCombine.patch to fix InstCombine init
  * Will be fixed in 6.0.1 release</changelog>
  <changelog author="msrb@suse.com" date="1526558401">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1086445)</changelog>
  <changelog author="msrb@suse.com" date="1528977600">- Do not requires gcc6 for older sle versions.
  * llvm6 is not built on &lt;= 12 SP3 and this was preventing build
    on 12 SP4.</changelog>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
</package>
<package pkgid="7ae432bc3734197211b2806842894b09f28385d259ef3df0f07ff05957aad5b0" name="python3-relatorio" arch="noarch">
  <version epoch="0" ver="0.8.1" rel="lp151.3.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1436529600">- Version 0.6.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1442664000">- version 0.6.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1467288000">- version 0.6.3
  changed naming of .changes file</changelog>
  <changelog author="axel.braun@gmx.de" date="1471176000">- fixed link to pypi</changelog>
  <changelog author="axel.braun@gmx.de" date="1472126400">- LICENSE file added</changelog>
  <changelog author="axel.braun@gmx.de" date="1482062400">- version 0.6.4
  * Use StringIO instead of BytesIO for TextSerializer result</changelog>
  <changelog author="axel.braun@gmx.de" date="1488974400">- changes for singlespec</changelog>
  <changelog author="axel.braun@gmx.de" date="1501416000">- Version 0.7.0
  * Replace hard-coded extensions by mimetypes guess
  * Add more guess types: 'boolean', 'date', 'time' and 'void'
  * Add support for Flat OpenDocument</changelog>
  <changelog author="axel.braun@gmx.de" date="1508500800">- Version 0.7.1 - Bugfix release
  * Remove warning when import plugin fails
  * Apply the guess type function on the correct node
  * Fix guess_type for date and datetime</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- version 0.8.0
  * Do not guess_type on styled cell content
  * Remove type attributes when guessing type
  * Add support for Python 3.6
  * Remove soft-page-break
  * tests added to spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1512993600">- Explain why the tests are conditioned around
- Specify all the runtime dependencies based on setup.py</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1538568000">- version 0.8.1
  * Add support for Python 3.7
  * Escape invalid XML characters
  * Enforce closing tag to be the same directive as the opening
  * Use compression for zip file
  * Write mimetype as first file of the zip file</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1562328000">- python-magic added to requirements</changelog>
</package>
<package pkgid="dbaa596c2cdab153776f3f632777ef69a0b163a7b7f32b4bb44656a5e17822f0" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="75a4d812c8aedfd0279e8a708f22944861591bad6645f568584f8654c2b1c16c" name="python3-requests-test" arch="noarch">
  <version epoch="0" ver="2.20.1" rel="lp151.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1456833600">- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
  correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set</changelog>
  <changelog author="dmueller@suse.com" date="1463572800">- update to 2.10.1:
  * SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
  * Updated bundled urllib3 to 1.15.1.
  * Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
    as its underlying datastore.
  * Don't use redirect_cache if allow_redirects=False
  * When passed objects that throw exceptions from ``tell()``, send them via
    chunked transfer encoding instead of failing.
  * Raise a ProxyError for proxy related connection issues.</changelog>
  <changelog author="tbechtold@suse.com" date="1472731200">update to version v2.11.1
  * Update urllib3 to 1.16
  * Close and then release the connection
  * Added tests for should_bypass_proxies function
  * Update documentation of Session.max_redirects
  * Document bunch of return types
  * Update HISTORY.rst
  * Cleaning up comment on JSON encoding to be more strictly relevant.
  * Oh yeah, we updated urllib3 too.
  * Fixing test; it was accomplishing the right thing, but doing it in the wrong way.
  * compensate for lack of taste
  * Use xfail marker for a test expected to fail without Internet connection
  * in python3.x not have StringIO
  * Spelling fixes
  * adding in slice_length fix and test for chunk_size=None (#3370)
  * Support responses like `HTTP/1.1 404 Unicode chars` (#3385)
  * Document header ordering. (#3295)
  * Add section on SOCKS proxies.
  * Update list of supported Python versions in todo.rst
  * removing Content-Type and Transfer-Encoding headers on redirect
  * check and test for headers containing return characters or leading whitespace
  * Clarify Python versions supported by requests
  * Allow graceful interruption of testserver.Server
  * reverting 3362
  * fixed date formatting
  * Make BaseAdapter describe the mandatory adapter interface (#3216)
  * Note how HTTPErrors are raised
  * Removing charset from JSON content type; tightening requirements on .encode()
  * Add 'all' proxy selection to select_proxy
  * Fix TypeError when get json-encoded content of a response
  * wildly inaccurate button results in deletion
  * v2.11.1
  * v2.11.0
  * Prepare changelog for 2.11.1.
  * Allow None value for chunk_size again (#3368)
  * updating documentation to reflect decision of #3386
  * added in type check for chunk_size
  * Update a note on AppEngine
  * Remove duplicate import warnings
  * adding asserted_encoding check on None type encoding to match text() behavior (#3362)
  * Encoding JSON requests to bytes for urllib3 to handle; ensuring same with testing.
  * docs updates
  * Changelog for 2.11
  * Update README.rst
  * Use iter instead of noop list comprehension
  * Test security warnings (#3289)
  * Combined tests to one tests for should_bypass_proxies method
  * Update index.rst
  * Replace tab with appropriate spaces.
  * Support ALL_PROXY environment variable
  * Add a bit about RequestsCookieJar to Cookies section
  * making module docstrings and coding comments consistent
  * docs: Add a note about SSL c_rehash
  * updating docstring to match functionality
  * fix grammer mistakes in Quickstart
  * consider plain ip notation of an ip in no_proxy if not in cidr notation
  * Defining header value type requirements and tests
  * removing redundant test
  * updating HISTORY
  * adding in pep8 fixes
  * building Response manually
  * making class and function docstrings consistent</changelog>
  <changelog author="tbechtold@suse.com" date="1482926400">update to version v2.12.4
  * Python 2 compatibility
  * adding tests for super_len conditional flow
  * Check in updated idna.
  * Test case for requests getting stuck on post redirect with seekable stream
  * v2.12.2
  * added new test, original test restored
  * Make Response.content return None if raw is None
  * adding unicode_is_ascii utility function
  * Update sidebarlogo.html
  * Fixed another scheme proxy over "all" priority
  * Add changelog for 1.19.1
  * changed behavior of basic-http-auth test
  * correct backtick formatting
  * Note @jeremycline is now our contact.
  * Order of type check
  * Add prepared request pickling tests
  * adding comment
  * Add deprecation warnings for 3.0
  * clarify that the `chunk_size` is optional when streaming to a file
  * adding ISO-8859-1 fallback for reason decoding
  * fixed some error
  * pysocks 1.5.7 blacklisting, due to IPv6 problems
  * Fix tests for new urllib3 exception text.
  * make add_dict_to_cookiejar cookielib.CookieJar compatible
  * correct module for cookiejar_from_dict in docs
  * converting update call to merge_cookies call for cookielib compatibility
  * streaming doc clarification
  * removing redundant logic from prepare_content_length
  * Update certifi certs to 2016.09.26
  * Specify self.cert is used for SSL client certificates
  * Fix how we test fallback to latin-1 reason encoding
  * adding method to url tests
  * Enable UTS46 mode.
  * Adding 'import requests' to readme code snippet. (#3700)
  * Add Documentation for custom methods
  * adding passthrough in close() for non-urllib3-like Responses
  * remove extra import
  * Test chunked upload doesn't set content length
  * Change setuptools extra for new secure extra.
  * fix issue when the file-like object raises an IOError with tell
  * Added myself to AUTHORS
  * Changelog entry for better IDNA.
  * updated tests with IDNA encoded and IPv6 urls
  * documentation line added for consistency with the post method
  * Fall back to streaming
  * added unicode auth test
  * updates authors
  * spelling fix for release-process
  * Revert "Adding 'import requests' to readme code snippet."
  * Document that Response.json() may raise ValueError
  * Amplifies the timeout warning in the docs.
  * Revert "Restrict URL preparation to HTTP/HTTPS"
  * Update README.rst
  * Further complicate the makefile to rewrite imports
  * Unable unicode in basic http auth
  * Various packaging requirements for idna
  * Fixed: httpbin doesn't support bytes
  * reverting 3357 and comparing properly encoded strings
  * Fixed issue #3696. Added a test for it as well.
  * fixed: httpbin with unicode auth
  * Remove error swallowing exception catching of AttributeError
  * Update sidebarintro.html
  * removing use of seek to set total_length
  * Update urllib3 to 1.19
  * Use IDNA2008 to encode hosts.
  * Formatted the example to fix the color highlighting
  * Add tests to verify that correct 'Content-Length' or 'Transfer-Encoding' headers are being set in PreparedRequest.
  * [httpAdapter] allow empty password in proxy credentials
  * Fixed bug to give scheme proxy priority over "all"
  * adding decoding requirement for Python 3
  * fixes broken link on documentation page
  * Basic tests for internationalized domain names.
  * Update Comments &amp; Magic Strings
  * Change module of internal references to to_native_str()
  * Add pickle test with hooks
  * update 307 tests to check body content
  * requests.post checked data parameters for type like dict.
  * test different CookieJar types for add_dict_to_cookiejar
  * Restrict URL preparation to HTTP/HTTPS
  * Indicate shell command in README is code-like.
  * documentation on encoding fallback for streaming
  * Fixed readme typo - 'site' should be 'domain'
  * Rework Bytestring Host Test to use PyTest Httpbin
  * Add makefile to get latest idna release.
  * Tests for our URL handling.
  * Add test for request when Host header is bytestring
  * Move to_native_string to _internal_utils.py to avoid circular dependency
  * Add workaround to avoid implicit import of encodings.idna.
  * minor doc string cleanup
  * little modification  in consume_socket_content
  * links
  * Update bundled urllib3 to 1.19.1
  * Changes to documentation based on comments and correction of list of authors.
  * Add license for idna package.
  * Add line to AUTHORS
  * Adjust patch to utilize requests utility functions
  * test _body_position and rewind_body
  * Seems like we're missing a backport here.
  * new logo :D
  * add socket tests for 401 redirect and 401 failure
  * Adding notes about Request's timeout behavior.
  * fixed usage unicode string
  * unicode test for _basic_auth_str
  * Let's use capitals.
  * adding string casting for non-bytes values
  * Add patch to avoid bytestring/str hodgepodge
  * Vendor idna v2.1
  * Clarify allow_redirects
  * v2.12.3
  * v2.12.0
  * v2.12.1
  * v2.12.4
  * modifying IDNA encoding check to allow fallback
  * Use seek from end rather than getvalue
  * updating pickling tests for PreparedRequest
  * We only ship tagged releases now.
  * Make Response.content() return None if status_code is None
  * Just lstrip instead of strip because trailing whitespace already works.
  * adding rewind for re-POST bodies
  * Add persistent examples
- update urllib3 requirement to 1.19.1
- add idna requirement, refresh unbundling patch</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1488801600">- fixed dependencies in spec
- update to version 2.13.0
  * Only load the idna library when we?ve determined we need it.
    This will save some memory for users.
  * Updated bundled urllib3 to 1.20.
  * Updated bundled idna to 2.2.
- update to version 2.12.5
  * Fixed an issue with JSON encoding detection, specifically detecting
    big-endian UTF-32 with BOM.</changelog>
  <changelog author="jmatejek@suse.com" date="1489492800">- update for multipython build
- synchronize with python 3 version
  * drop urllib3-ssl-default-context.patch
  * add requests-do-not-use-bundle.patch
- debundle urllib3 and chardet
- enable test suite</changelog>
  <changelog author="alarrosa@suse.com" date="1493726400">- The following two entries should have been added to the previous
  changelog entry.
- Drop urllib3-ssl-default-context.patch
- Add requests-do-not-use-bundle.patch</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Ensure neutrality of description.</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2.16.5:
  * unvendored bundled libraries
  * for more changes, see https://pypi.python.org/pypi/requests
- drop no-default-cacert.patch: this is now in python-certifi
- drop requests-do-not-use-bundle.patch: obsolete</changelog>
  <changelog author="tbechtold@suse.com" date="1499083200">update to version v2.18.1
  * 2.17.1
  * Fix a typo: verison -&gt; version
  * fix
  * Prepare v2.18.0
  * Update requirements.txt
  * cleanup models.py
  * Preserve identity of unbundled deps
  * ignore undefined names in flake8
  * flake8 ignore lambda expressions
  * Add the pytest .cache/ directory to .gitignore
  * docutils
  * try junit
  * new installation location
  * cleanup utils.py
  * flake8report.txt
  * empty commit
  * no more pipenv
  * Begin dev section of README
  * Remove exec permission from files that shouldn't have it
  * change development philosophy docs to reflect reality
  * fix manifest file
  * only flake8 the right directory
  * update development documentation
  * Remove session redirect cache
  * no piping to a file
  * Catch error if multiprocessing is not available or is unable to determine the number of CPUs
  * todo
  * cleanup sessions.py
  * typo
  * number of cores for travis
  * ignore import statements for flake8
  * Update README.rst
  * better ci file
  * bunk change
  * that doesn't work on windows
  * improve development instructions
  * Fix a typo: paramters -&gt; parameters
  * Adds changelog entry for #4134
  * ignore line continuations for flake8
  * Allow Requests.Response to be used as a context manager
  * Fix requests.packages not having package attributes
  * remove note about cacerts.pem
  * v2.17.3
  * improve install documentation syntax
  * improve installation instructions
  * flake8: import statement improvements
  * fix spaces in api.py
  * v2.18.1
  * skip for now
  * v2.17.2
  * fix flake8 for EOF in __init__.py
  * improve flake8 help.py
  * Prepare for next release cycle
  * try this travis file
  * remove "are you crazy?" section
  * fix sidebars
  * Update index.rst
  * fix empty lines for flake8
  * convert version compatibility checks to warning
  * fix github stars
  * v2.17.1
  * improve line continuations for flake8
  * attempt new ads
  * speed up appveyor
  * v2.17.0
  * improve installation docs
  * fix flake8 indent error
  * Adds to AUTHORS
  * Clearer makefile for building README
  * flake8
  * Fixes error swallowing in set_environ
  * cleanup help.py (flake8)
  * improve install docs
  * new requests namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to version v2.18.2
  * Add requirements.txt to MANIFEST.in
  * test ssl version check functions as expected in python 2.6
  * no more stickers
  * fix OPENSSL_VERSION_NUMBER check on Python2.6's ssl module
  * Setup HISTORY for next release
  * Use 'prefix' instead of 'key' in session docstring
  * Allow urllib3 1.22
  * v2.18.2
  * stickers
  * redundant comma</changelog>
  <changelog author="arun@gmx.de" date="1506254400">- update to version 2.18.4:
  * Improvements
    + Error messages for invalid headers now include the header name
    for easier debugging
  * Dependencies
    + We now support idna v2.6.
- changes from version 2.18.3:
  * Improvements
    + Running $ python -m requests.help now includes the installed
    version of idna.
  * Bugfixes
    + Fixed issue where Requests would raise ConnectionError instead
    of SSLError when encountering SSL problems when using urllib3
    v1.22.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE
- In no SUSE evironments some tests related with certificates can
  fail. Skip the tests if this case.</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py?s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="Arun Persaud &lt;arun@gmx.de&gt;" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="Bryan Stephenson &lt;bstephenson@suse.com&gt;" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
</package>
<package pkgid="1fa6679c8446340e5d397578621c1fb7adc77e5be2a288be385c769e0b843cf8" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="e1752438b263a0f836d6669e3426fbbd26fd3b524c79ba4cf79c0eb1811c45d0" name="python3-shaptools" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First package version</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Fix UT to check the inst formatting correctly
- Move the comment to the right place
- Enforce the HANA instance nr format.
- Forces Intance nr always with 2 positions filled with 0
- Forces right formating on HANA OS admin user.</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.</changelog>
  <changelog author="dakechi@suse.com" date="1551873600">- Fix the package license to be in synch with repo license.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556020800">- Remove enum34 dependency from code</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update SR registration process. Now the methods retries the
  registration command until a successful return and copies the
  SSFS files from the primary node as well</changelog>
  <changelog author="Ayoub Belarbi (abelarbi@suse.com)" date="1559131200">- Update hdb connector to return metadata besides the query
  records.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559649600">- Create package version 0.2.0 with the latest changes</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available from SLE12-SP2 to SLE15 versions
  (jsc#SLE-4031, jsc#SLE-4143, boo#1137989)</changelog>
</package>
<package pkgid="8621c43973c01b0062157ce0673e06e1271f7ceeaf444209359642ce150c1b5c" name="python3-speechd" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="ee64d0781265fc8e4d68eb8adeefa2bfa89ffce7a985e519978d91b1497660a2" name="python3-speechd" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="3943bfaab8336441f41907d555438392184efe47c65df74f3188f7bcd73d20dd" name="python3-speechd" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="0fa3de6b1816ee95b8980b29f38b65945faea2919f092febabfd899b8cd7cf1c" name="python3-speechd" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="21bacc2f260d843556582eee6b55c076e9593914dc0bf56afe7a2900b2b3c648" name="python3-sss-murmur" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="7d9ec9b4574708386a3efa33c4ef418f664dfe70b3853699b86c14c514d6f558" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="ff564954af7e599b9fea427c9f737de9bb8b28e6c0c2edd249b25cce946690a0" name="python3-sss_nss_idmap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="f891285018df72af528672c7895972f2f55fbfcdb4c0993c4392d7412c0e8949" name="python3-sss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="8755c3a34bd539bef40621ed542a5e0be83c16ae87b9cf990b8e996f551913d7" name="python3-sssd-config" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="17527d2c7fa62117200eb10510321727c5412aa00b747f3a39ae135e70bf3c45" name="python3-sssd-config" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="2634c7180ea76b56db50e0b02a08405a88e2c028d45ce73655776a546fc6c576" name="python3-targetcli-fb" arch="noarch">
  <version epoch="0" ver="2.1.49" rel="lp151.2.3.1"/>
  <changelog author="lduncan@suse.com" date="1461067200">- Creating from latest upstream version 2.1.fb43</changelog>
  <changelog author="lduncan@suse.com" date="1469448000">-  updated spec file: removed Provides/Obsoletes of
  targetcli and python-targetcli, and added
  Conflicts with targetcli (bsc#986475)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Trim macro indirections and empty macros</changelog>
  <changelog author="hare@suse.com" date="1492084800">- Update to version 2.1.fb46 (bsc#1032833):
  * version 2.1.fb44
  * Remove build scripts for RPM and Debian packages
  * Add Gentoo to the list of distributions that ship targetcli-fb
  * Add support to create/delete ALUA groups on a storage object
  * Add support to set/get a LUN's ALUA group
  * version 2.1.fb45
  * Create ALUA dir and def group in UI with storage object
  * Clear backstore cache on refresh
  * version 2.1.fb46</changelog>
  <changelog author="lszhu@suse.com" date="1502971200">- Update to version 2.1.fb47
  * Improving ALUA and TCMU support, as well as moving the default
  directory for APTPL files from /var/target to /etc/target,
  for better FHS compliance.</changelog>
  <changelog author="lduncan@suse.com" date="1513339200">- Moved targetcli-fb-2.1.fb47.tar.gz to targetcli-fb-2.1.fb47.tar.xz,
  after appropriate decompression/compression, to match SPEC and
  _service file. Updated _servicedata to match.</changelog>
  <changelog author="lduncan@suse.com" date="1513339201">- Ran "spec-cleaner" over the SPEC file, to clean it up, before
  support for Python3 is added.</changelog>
  <changelog author="lduncan@suse.com" date="1515067200">- Converted RPM SPEC file to singlepsec format (bsc#1045332),
  updating SPEC file only. This breaks this package into two
  packages. The new base package is called targetcli-fb-common,
  and does not depend on the python version. The other package
  is python-version dependent, and is called either
  python2-targetcli-fb or python3-targetcli-fb, dpending on
  which version of Python you wish to use.</changelog>
  <changelog author="lduncan@suse.com" date="1515067201">- Added dependency on dbus package to SPEC file (bsc#1073913)</changelog>
  <changelog author="lduncan@suse.com" date="1516017600">- Removed duplicate BuildRequires line, and add Conflicts for
  sub-package</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- Fix upgrade path by provide/obsolete version-release</changelog>
  <changelog author="olaf@aepfle.de" date="1519560000">- Fix upgrade path by provide/obsolete targetcli/targetcli-fb (bsc#1082693)</changelog>
  <changelog author="ddiss@suse.com" date="1523361600">- Automatically generate version string from upstream tag
  + Retain current fb-removed version format used
  + Rename targetcli-fb-2.1.fb47.tar.xz to targetcli-fb-2.1.47.tar.xzar.xz
    and cleanup hardcoded duplicate name/version values in spec</changelog>
  <changelog author="ddiss@suse.com" date="1523448000">- Merge RBD support from non-fb version (bsc#1079329)
  + Split-out-blockdev-readonly-state-detection-helper.patch
  + rbd-support.patch (SLE/Leap only, due to LIO kernel dependency)
  + Add explicit Provides for "python-rtslib-rbd"
- Detect write-protected block devices (bsc#1070815)
  + Auto-detect-readonly-state-for-iblock-devices.patch
  + Use-signed-char-instead-of-char.patch</changelog>
  <changelog author="lduncan@suse.com" date="1524225600">- Only save current config to backup if current
  config exists (bsc#1090424), adding patch:
  * targetcli-only-save-old-config-if-present.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539864000">- Update to version 2.1.49:
  * version 2.1.fb49
  * targetcli-fb: Add support for media change
  * fix the parameter of define_config_group_param
  * saveconfig: handle backups with block-level delete
  * saveconfig: way for block-level save with delete command
  * create: add a way to set control string
  * fix amount of backup files in backup dir
  * config: add saveconfig command to StorageObject level
  * Allow to customize a home directory
  * Fix default max_backup_files in ui_command_saveconfig
  * MappedLuns and Luns max number is not the same anymore
  * Use signed char instead of char
  * version 2.1.fb48
  * remove wrong exit code from targetcli --version
  * backup: global option to tune max no. of backup conf files
  * config: rename key 'kept_backups' as 'max_backup_files'
  * config: backup when current config is different from recent backup copy
  * config: defend on '/etc/target/backup' directory
  * Auto-detect readonly state for iblock devices
  * Read number of backup files to keep from file
  * skip refreshing user backed storage object when it is null
  * Replace dbus-python with GObject Introspection
  This replaces targetcli-fb-2.1.47.tar.xz with targetcli-fb-2.1.49.tar.xz,
  and removes the following patches:
  * Auto-detect-readonly-state-for-iblock-devices.patch
  * Use-signed-char-instead-of-char.patch
  * targetcli-only-save-old-config-if-present.patch
  and updates the SPEC file.</changelog>
  <changelog author="ddiss@suse.com" date="1544184000">- Enable RBD support for SLE/Leap 15+ (bsc#1118516)</changelog>
  <changelog author="lduncan@suse.com" date="1549540800">- Ensure this package and the deprecated lio-utils package
  do not run at the same time, in a sane way (bsc#1123423),
  updating the source file targetcli-fb.service. Also, updated
  the SPEC file with new year, updated URL, and http-&gt;https.</changelog>
  <changelog author="ddiss@suse.com" date="1554292800">- support emulate_pr attribute changes (bsc#1121998)
  + Add-emulate_pr-backstore-attribute.patch</changelog>
</package>
<package pkgid="c48b48f5ab10ff6862a84bf8a05242c6db0b7bcaa0d6a67d8fe27b435ac95e46" name="python3-tzlocal" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp151.3.3.1"/>
  <changelog author="seiler@b1-systems.de" date="1415188800">- inital commit</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275200">- added required pytz dependency
- enhanced truncated description and add URL to source</changelog>
  <changelog author="seiler@b1-systems.de" date="1415275201">- corrected license
- added check section with python test</changelog>
  <changelog author="jkeil@suse.de" date="1433851200">- Reworked spec file
  * Bump version
  * Use github upstream url
  * Improve description and summary
  * Use tarball instead of zip
  * Minimize %files section</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436788800">- Fix building on SLES 11</changelog>
  <changelog author="ms@suse.com" date="1442232000">- Package required in SLE12 due to fate#319400</changelog>
  <changelog author="rjschwei@suse.com" date="1499774400">- Convert to singlespec build</changelog>
  <changelog author="bear454@opensuse.org" date="1503921600">- Update to version 1.4
  - Relicensed upstream as MIT
  - Dropping support for Python versions 2.5, 3.1, 3.2
  - adding support for Python 3.6
  - Closes stdout and stderr to get rid of ResourceWarnings
  - Added support for /var/db/zoneinfo
  - Tests failed if TZ was set in the environment.
  - Replaces os.popen() with subprocess.Popen()
  - Systemd stores no time zone name, forcing us to look at the
    name of the file that localtime symlinks to.</changelog>
  <changelog author="sean.marlow@suse.com" date="1506945600">- Update source tarball location.</changelog>
  <changelog author="Boris Manojlovic &lt;boris@steki.net&gt;" date="1559736000">- fix fdupes handling as it was linking python2 source into python3
  package breaking it boo#1137352</changelog>
</package>
<package pkgid="d924ed526e422b62dc776f39aae51c2abc033b4ba9f159f7646eb4d3c7947fda" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="4bc2908e692401dcadb1ba5fb9438224cf702dd7ffd3c11e0b00df7f1704d89f" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="1970f1a521c9a91800fce62c81217369181d7899e4e23f29144efbe433d31f0e" name="rclone" arch="src">
  <version epoch="0" ver="1.47.0" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1515844800">- Initial import of rclone v1.39, an rsync-like utility for cloud storage.</changelog>
  <changelog author="asarai@suse.com" date="1523620800">- Update to rclone v1.40.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200000">- Fix spec file causing build error (unresolvable) on Leap 42.3.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200001">- Update to rclone v1.41.
  * Too many changes to list, please see
    https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="asarai@suse.com" date="1529755200">- Update to rclone v1.42.
  See https://rclone.org/changelog/ for changelog.
- Switch to %license macro.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538049600">- Update to version v1.43.1
  * See https://rclone.org/changelog/ for the complete changelog.
- Switch to obs_scm</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543838400">- Update to version v1.45
  * See https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- Update to version 1.46:
  - New backends
  - Support Alibaba Cloud (Aliyun) OSS via the s3 backend (Nick Craig-Wood)
  - New commands
  - serve dlna: serves a remove via DLNA for the local network (nicolov)
  - New Features
  - copy, move: Restore deprecated --no-traverse flag (Nick Craig-Wood)
  - This is useful for when transferring a small number of files into a large destination
  - genautocomplete: Add remote path completion for bash completion (Christopher Peterson &amp; Danil Semelenov)
  - Buffer memory handling reworked to return memory to the OS better (Nick Craig-Wood)
  - Buffer recycling library to replace sync.Pool
  - Optionally use memory mapped memory for better memory shrinking
  - Enable with --use-mmap if having memory problems - not default yet
  - Parallelise reading of files specified by --files-from (Nick Craig-Wood)
  - check: Add stats showing total files matched. (Dario Guzik)
  - Allow rename/delete open files under Windows (Nick Craig-Wood)
  - lsjson: Use exactly the correct number of decimal places in the seconds (Nick Craig-Wood)
  - Add cookie support with cmdline switch --use-cookies for all HTTP based remotes (qip)
  - Warn if --checksum is set but there are no hashes available (Nick Craig-Wood)
  - Rework rate limiting (pacer) to be more accurate and allow bursting (Nick Craig-Wood)
  - Improve error reporting for too many/few arguments in commands (Nick Craig-Wood)
  - listremotes: Remove -l short flag as it conflicts with the new global flag (weetmuts)
  - Make http serving with auth generate INFO messages on auth fail (Nick Craig-Wood)
  - Bug Fixes
  - Fix layout of stats (Nick Craig-Wood)
  - Fix --progress crash under Windows Jenkins (Nick Craig-Wood)
  - Fix transfer of google/onedrive docs by calling Rcat in Copy when size is -1 (Cnly)
  - copyurl: Fix checking of --dry-run (Denis Skovpen)
  - Mount
  - Check that mountpoint and local directory to mount don?t overlap (Nick Craig-Wood)
  - Fix mount size under 32 bit Windows (Nick Craig-Wood)
  - VFS
  - Implement renaming of directories for backends without DirMove (Nick Craig-Wood)
  - now all backends except b2 support renaming directories
  - Implement --vfs-cache-max-size to limit the total size of the cache (Nick Craig-Wood)
  - Add --dir-perms and --file-perms flags to set default permissions (Nick Craig-Wood)
  - Fix deadlock on concurrent operations on a directory (Nick Craig-Wood)
  - Fix deadlock between RWFileHandle.close and File.Remove (Nick Craig-Wood)
  - Fix renaming/deleting open files with cache mode ?writes? under Windows (Nick Craig-Wood)
  - Fix panic on rename with --dry-run set (Nick Craig-Wood)
  - Fix vfs/refresh with recurse=true needing the --fast-list flag
  - Local
  - Add support for -l/--links (symbolic link translation) (yair@unicorn)
  - this works by showing links as link.rclonelink - see local backend docs for more info
  - this errors if used with -L/--copy-links
  - Fix renaming/deleting open files on Windows (Nick Craig-Wood)
  - Crypt
  - Check for maximum length before decrypting filename to fix panic (Garry McNulty)
  - Azure Blob
  - Allow building azureblob backend on *BSD (themylogin)
  - Use the rclone HTTP client to support --dump headers, --tpslimit etc (Nick Craig-Wood)
  - Use the s3 pacer for 0 delay in non error conditions (Nick Craig-Wood)
  - Ignore directory markers (Nick Craig-Wood)
  - Stop Mkdir attempting to create existing containers (Nick Craig-Wood)
  - B2
  - cleanup: will remove unfinished large files &gt;24hrs old (Garry McNulty)
  - For a bucket limited application key check the bucket name (Nick Craig-Wood)
  - before this, rclone would use the authorised bucket regardless of what you put on the command line
  - Added --b2-disable-checksum flag (Wojciech Smigielski)
  - this enables large files to be uploaded without a SHA-1 hash for speed reasons
  - Drive
  - Set default pacer to 100ms for 10 tps (Nick Craig-Wood)
  - This fits the Google defaults much better and reduces the 403 errors massively
  - Add --drive-pacer-min-sleep and --drive-pacer-burst to control the pacer
  - Improve ChangeNotify support for items with multiple parents (Fabian Möller)
  - Fix ListR for items with multiple parents - this fixes oddities with vfs/refresh (Fabian Möller)
  - Fix using --drive-impersonate and appfolders (Nick Craig-Wood)
  - Fix google docs in rclone mount for some (not all) applications (Nick Craig-Wood)
  - Dropbox
  - Retry-After support for Dropbox backend (Mathieu Carbou)
  - FTP
  - Wait for 60 seconds for a connection to Close then declare it dead (Nick Craig-Wood)
  - helps with indefinite hangs on some FTP servers
  - Google Cloud Storage
  - Update google cloud storage endpoints (weetmuts)
  - HTTP
  - Add an example with username and password which is supported but wasn?t documented (Nick Craig-Wood)
  - Fix backend with --files-from and non-existent files (Nick Craig-Wood)
  - Hubic
  - Make error message more informative if authentication fails (Nick Craig-Wood)
  - Jottacloud
  - Resume and deduplication support (Oliver Heyme)
  - Use token auth for all API requests Don?t store password anymore (Sebastian Bünger)
  - Add support for 2-factor authentification (Sebastian Bünger)
  - Mega
  - Implement v2 account login which fixes logins for newer Mega accounts (Nick Craig-Wood)
  - Return error if an unknown length file is attempted to be uploaded (Nick Craig-Wood)
  - Add new error codes for better error reporting (Nick Craig-Wood)
  - Onedrive
  - Fix broken support for ?shared with me? folders (Alex Chen)
  - Fix root ID not normalised (Cnly)
  - Return err instead of panic on unknown-sized uploads (Cnly)
  - Qingstor
  - Fix go routine leak on multipart upload errors (Nick Craig-Wood)
  - Add upload chunk size/concurrency/cutoff control (Nick Craig-Wood)
  - Default --qingstor-upload-concurrency to 1 to work around bug (Nick Craig-Wood)
  - S3
  - Implement --s3-upload-cutoff for single part uploads below this (Nick Craig-Wood)
  - Change --s3-upload-concurrency default to 4 to increase perfomance (Nick Craig-Wood)
  - Add --s3-bucket-acl to control bucket ACL (Nick Craig-Wood)
  - Auto detect region for buckets on operation failure (Nick Craig-Wood)
  - Add GLACIER storage class (William Cocker)
  - Add Scaleway to s3 documentation (Rémy Léone)
  - Add AWS endpoint eu-north-1 (weetmuts)
  - SFTP
  - Add support for PEM encrypted private keys (Fabian Möller)
  - Add option to force the usage of an ssh-agent (Fabian Möller)
  - Perform environment variable expansion on key-file (Fabian Möller)
  - Fix rmdir on Windows based servers (eg CrushFTP) (Nick Craig-Wood)
  - Fix rmdir deleting directory contents on some SFTP servers (Nick Craig-Wood)
  - Fix error on dangling symlinks (Nick Craig-Wood)
  - Swift
  - Add --swift-no-chunk to disable segmented uploads in rcat/mount (Nick Craig-Wood)
  - Introduce application credential auth support (kayrus)
  - Fix memory usage by slimming Object (Nick Craig-Wood)
  - Fix extra requests on upload (Nick Craig-Wood)
  - Fix reauth on big files (Nick Craig-Wood)
  - Union
  - Fix poll-interval not working (Nick Craig-Wood)
  - WebDAV
  - Support About which means rclone mount will show the correct disk size (Nick Craig-Wood)
  - Support MD5 and SHA1 hashes with Owncloud and Nextcloud (Nick Craig-Wood)
  - Fail soft on time parsing errors (Nick Craig-Wood)
  - Fix infinite loop on failed directory creation (Nick Craig-Wood)
  - Fix identification of directories for Bitrix Site Manager (Nick Craig-Wood)
  - Fix upload of 0 length files on some servers (Nick Craig-Wood)
  - Fix if MKCOL fails with 423 Locked assume the directory exists (Nick Craig-Wood)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564801">- bump required go to 1.11 as we are using the mod support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Update to version 1.47.0. boo#1137685
  - New backends
  - Backend for Koofr cloud storage service. (jaKa)
  - New Features
  - Resume downloads if the reader fails in copy (Nick Craig-Wood)
  - Use `--fast-list` for listing operations where it won't use more memory (Nick Craig-Wood)
  - Make `--files-from` traverse the destination unless `--no-traverse` is set (Nick Craig-Wood)
  - Make server side copy account bytes and obey `--max-transfer` (Nick Craig-Wood)
  - Add `--create-empty-src-dirs` flag and default to not creating empty dirs (ishuah)
  - Add client side TLS/SSL flags `--ca-cert`/`--client-cert`/`--client-key` (Nick Craig-Wood)
  - Implement `--suffix-keep-extension` for use with `--suffix` (Nick Craig-Wood)
  - serve dlna: Add connection manager service description to improve compatibility (Dan Walters)
  - lsf: Add 'e' format to show encrypted names and 'o' for original IDs (Nick Craig-Wood)
  - lsjson: Added `--files-only` and `--dirs-only` flags (calistri)
  - rc: Implement operations/publiclink the equivalent of `rclone link` (Nick Craig-Wood)
  - Bug Fixes
  - accounting: Fix total ETA when `--stats-unit bits` is in effect (Nick Craig-Wood)
  - Bash TAB completion
  - Use private custom func to fix clash between rclone and kubectl (Nick Craig-Wood)
  - Fix for remotes with underscores in their names (Six)
  - Fix completion of remotes (Florian Gamböck)
  - Fix autocompletion of remote paths with spaces (Danil Semelenov)
  - serve dlna: Fix root XML service descriptor (Dan Walters)
  - ncdu: Fix display corruption with Chinese characters (Nick Craig-Wood)
  - Add SIGTERM to signals which run the exit handlers on unix (Nick Craig-Wood)
  - rc: Reload filter when the options are set via the rc (Nick Craig-Wood)
  - VFS / Mount
  - Fix FreeBSD: Ignore Truncate if called with no readers and already the correct size (Nick Craig-Wood)
  - Read directory and check for a file before mkdir (Nick Craig-Wood)
  - Shorten the locking window for vfs/refresh (Nick Craig-Wood)
  - Azure Blob
  - Enable MD5 checksums when uploading files bigger than the "Cutoff" (Dr.Rx)
  - Fix SAS URL support (Nick Craig-Wood)
  - B2
  - Allow manual configuration of backblaze downloadUrl (Vince)
  - Ignore already_hidden error on remove (Nick Craig-Wood)
  - Ignore malformed `src_last_modified_millis` (Nick Craig-Wood)
  - Drive
  - Add `--skip-checksum-gphotos` to ignore incorrect checksums on Google Photos (Nick Craig-Wood)
  - Allow server side move/copy between different remotes. (Fionera)
  - Add docs on team drives and `--fast-list` eventual consistency (Nestar47)
  - Fix imports of text files (Nick Craig-Wood)
  - Fix range requests on 0 length files (Nick Craig-Wood)
  - Fix creation of duplicates with server side copy (Nick Craig-Wood)
  - Dropbox
  - Retry blank errors to fix long listings (Nick Craig-Wood)
  - FTP
  - Add `--ftp-concurrency` to limit maximum number of connections (Nick Craig-Wood)
  - Google Cloud Storage
  - Fall back to default application credentials (marcintustin)
  - Allow bucket policy only buckets (Nick Craig-Wood)
  - HTTP
  - Add `--http-no-slash` for websites with directories with no slashes (Nick Craig-Wood)
  - Remove duplicates from listings (Nick Craig-Wood)
  - Fix socket leak on 404 errors (Nick Craig-Wood)
  - Jottacloud
  - Fix token refresh (Sebastian Bünger)
  - Add device registration (Oliver Heyme)
  - Onedrive
  - Implement graceful cancel of multipart uploads if rclone is interrupted (Cnly)
  - Always add trailing colon to path when addressing items, (Cnly)
  - Return errors instead of panic for invalid uploads (Fabian Möller)
  - S3
  - Add support for "Glacier Deep Archive" storage class (Manu)
  - Update Dreamhost endpoint (Nick Craig-Wood)
  - Note incompatibility with CEPH Jewel (Nick Craig-Wood)
  - SFTP
  - Allow custom ssh client config (Alexandru Bumbacea)
  - Swift
  - Obey Retry-After to enable OVH restore from cold storage (Nick Craig-Wood)
  - Work around token expiry on CEPH (Nick Craig-Wood)
  - WebDAV
  - Allow IsCollection property to be integer or boolean (Nick Craig-Wood)
  - Fix race when creating directories (Nick Craig-Wood)
  - Fix About/df when reading the available/total returns 0 (Nick Craig-Wood)
- Add bash-completion and zsh-completion support.</changelog>
</package>
<package pkgid="f68afece144809ef42804ff47b1ed897eacf092408be845d481a439324837df9" name="rclone" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1515844800">- Initial import of rclone v1.39, an rsync-like utility for cloud storage.</changelog>
  <changelog author="asarai@suse.com" date="1523620800">- Update to rclone v1.40.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200000">- Fix spec file causing build error (unresolvable) on Leap 42.3.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200001">- Update to rclone v1.41.
  * Too many changes to list, please see
    https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="asarai@suse.com" date="1529755200">- Update to rclone v1.42.
  See https://rclone.org/changelog/ for changelog.
- Switch to %license macro.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538049600">- Update to version v1.43.1
  * See https://rclone.org/changelog/ for the complete changelog.
- Switch to obs_scm</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543838400">- Update to version v1.45
  * See https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- Update to version 1.46:
  - New backends
  - Support Alibaba Cloud (Aliyun) OSS via the s3 backend (Nick Craig-Wood)
  - New commands
  - serve dlna: serves a remove via DLNA for the local network (nicolov)
  - New Features
  - copy, move: Restore deprecated --no-traverse flag (Nick Craig-Wood)
  - This is useful for when transferring a small number of files into a large destination
  - genautocomplete: Add remote path completion for bash completion (Christopher Peterson &amp; Danil Semelenov)
  - Buffer memory handling reworked to return memory to the OS better (Nick Craig-Wood)
  - Buffer recycling library to replace sync.Pool
  - Optionally use memory mapped memory for better memory shrinking
  - Enable with --use-mmap if having memory problems - not default yet
  - Parallelise reading of files specified by --files-from (Nick Craig-Wood)
  - check: Add stats showing total files matched. (Dario Guzik)
  - Allow rename/delete open files under Windows (Nick Craig-Wood)
  - lsjson: Use exactly the correct number of decimal places in the seconds (Nick Craig-Wood)
  - Add cookie support with cmdline switch --use-cookies for all HTTP based remotes (qip)
  - Warn if --checksum is set but there are no hashes available (Nick Craig-Wood)
  - Rework rate limiting (pacer) to be more accurate and allow bursting (Nick Craig-Wood)
  - Improve error reporting for too many/few arguments in commands (Nick Craig-Wood)
  - listremotes: Remove -l short flag as it conflicts with the new global flag (weetmuts)
  - Make http serving with auth generate INFO messages on auth fail (Nick Craig-Wood)
  - Bug Fixes
  - Fix layout of stats (Nick Craig-Wood)
  - Fix --progress crash under Windows Jenkins (Nick Craig-Wood)
  - Fix transfer of google/onedrive docs by calling Rcat in Copy when size is -1 (Cnly)
  - copyurl: Fix checking of --dry-run (Denis Skovpen)
  - Mount
  - Check that mountpoint and local directory to mount don?t overlap (Nick Craig-Wood)
  - Fix mount size under 32 bit Windows (Nick Craig-Wood)
  - VFS
  - Implement renaming of directories for backends without DirMove (Nick Craig-Wood)
  - now all backends except b2 support renaming directories
  - Implement --vfs-cache-max-size to limit the total size of the cache (Nick Craig-Wood)
  - Add --dir-perms and --file-perms flags to set default permissions (Nick Craig-Wood)
  - Fix deadlock on concurrent operations on a directory (Nick Craig-Wood)
  - Fix deadlock between RWFileHandle.close and File.Remove (Nick Craig-Wood)
  - Fix renaming/deleting open files with cache mode ?writes? under Windows (Nick Craig-Wood)
  - Fix panic on rename with --dry-run set (Nick Craig-Wood)
  - Fix vfs/refresh with recurse=true needing the --fast-list flag
  - Local
  - Add support for -l/--links (symbolic link translation) (yair@unicorn)
  - this works by showing links as link.rclonelink - see local backend docs for more info
  - this errors if used with -L/--copy-links
  - Fix renaming/deleting open files on Windows (Nick Craig-Wood)
  - Crypt
  - Check for maximum length before decrypting filename to fix panic (Garry McNulty)
  - Azure Blob
  - Allow building azureblob backend on *BSD (themylogin)
  - Use the rclone HTTP client to support --dump headers, --tpslimit etc (Nick Craig-Wood)
  - Use the s3 pacer for 0 delay in non error conditions (Nick Craig-Wood)
  - Ignore directory markers (Nick Craig-Wood)
  - Stop Mkdir attempting to create existing containers (Nick Craig-Wood)
  - B2
  - cleanup: will remove unfinished large files &gt;24hrs old (Garry McNulty)
  - For a bucket limited application key check the bucket name (Nick Craig-Wood)
  - before this, rclone would use the authorised bucket regardless of what you put on the command line
  - Added --b2-disable-checksum flag (Wojciech Smigielski)
  - this enables large files to be uploaded without a SHA-1 hash for speed reasons
  - Drive
  - Set default pacer to 100ms for 10 tps (Nick Craig-Wood)
  - This fits the Google defaults much better and reduces the 403 errors massively
  - Add --drive-pacer-min-sleep and --drive-pacer-burst to control the pacer
  - Improve ChangeNotify support for items with multiple parents (Fabian Möller)
  - Fix ListR for items with multiple parents - this fixes oddities with vfs/refresh (Fabian Möller)
  - Fix using --drive-impersonate and appfolders (Nick Craig-Wood)
  - Fix google docs in rclone mount for some (not all) applications (Nick Craig-Wood)
  - Dropbox
  - Retry-After support for Dropbox backend (Mathieu Carbou)
  - FTP
  - Wait for 60 seconds for a connection to Close then declare it dead (Nick Craig-Wood)
  - helps with indefinite hangs on some FTP servers
  - Google Cloud Storage
  - Update google cloud storage endpoints (weetmuts)
  - HTTP
  - Add an example with username and password which is supported but wasn?t documented (Nick Craig-Wood)
  - Fix backend with --files-from and non-existent files (Nick Craig-Wood)
  - Hubic
  - Make error message more informative if authentication fails (Nick Craig-Wood)
  - Jottacloud
  - Resume and deduplication support (Oliver Heyme)
  - Use token auth for all API requests Don?t store password anymore (Sebastian Bünger)
  - Add support for 2-factor authentification (Sebastian Bünger)
  - Mega
  - Implement v2 account login which fixes logins for newer Mega accounts (Nick Craig-Wood)
  - Return error if an unknown length file is attempted to be uploaded (Nick Craig-Wood)
  - Add new error codes for better error reporting (Nick Craig-Wood)
  - Onedrive
  - Fix broken support for ?shared with me? folders (Alex Chen)
  - Fix root ID not normalised (Cnly)
  - Return err instead of panic on unknown-sized uploads (Cnly)
  - Qingstor
  - Fix go routine leak on multipart upload errors (Nick Craig-Wood)
  - Add upload chunk size/concurrency/cutoff control (Nick Craig-Wood)
  - Default --qingstor-upload-concurrency to 1 to work around bug (Nick Craig-Wood)
  - S3
  - Implement --s3-upload-cutoff for single part uploads below this (Nick Craig-Wood)
  - Change --s3-upload-concurrency default to 4 to increase perfomance (Nick Craig-Wood)
  - Add --s3-bucket-acl to control bucket ACL (Nick Craig-Wood)
  - Auto detect region for buckets on operation failure (Nick Craig-Wood)
  - Add GLACIER storage class (William Cocker)
  - Add Scaleway to s3 documentation (Rémy Léone)
  - Add AWS endpoint eu-north-1 (weetmuts)
  - SFTP
  - Add support for PEM encrypted private keys (Fabian Möller)
  - Add option to force the usage of an ssh-agent (Fabian Möller)
  - Perform environment variable expansion on key-file (Fabian Möller)
  - Fix rmdir on Windows based servers (eg CrushFTP) (Nick Craig-Wood)
  - Fix rmdir deleting directory contents on some SFTP servers (Nick Craig-Wood)
  - Fix error on dangling symlinks (Nick Craig-Wood)
  - Swift
  - Add --swift-no-chunk to disable segmented uploads in rcat/mount (Nick Craig-Wood)
  - Introduce application credential auth support (kayrus)
  - Fix memory usage by slimming Object (Nick Craig-Wood)
  - Fix extra requests on upload (Nick Craig-Wood)
  - Fix reauth on big files (Nick Craig-Wood)
  - Union
  - Fix poll-interval not working (Nick Craig-Wood)
  - WebDAV
  - Support About which means rclone mount will show the correct disk size (Nick Craig-Wood)
  - Support MD5 and SHA1 hashes with Owncloud and Nextcloud (Nick Craig-Wood)
  - Fail soft on time parsing errors (Nick Craig-Wood)
  - Fix infinite loop on failed directory creation (Nick Craig-Wood)
  - Fix identification of directories for Bitrix Site Manager (Nick Craig-Wood)
  - Fix upload of 0 length files on some servers (Nick Craig-Wood)
  - Fix if MKCOL fails with 423 Locked assume the directory exists (Nick Craig-Wood)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564801">- bump required go to 1.11 as we are using the mod support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Update to version 1.47.0. boo#1137685
  - New backends
  - Backend for Koofr cloud storage service. (jaKa)
  - New Features
  - Resume downloads if the reader fails in copy (Nick Craig-Wood)
  - Use `--fast-list` for listing operations where it won't use more memory (Nick Craig-Wood)
  - Make `--files-from` traverse the destination unless `--no-traverse` is set (Nick Craig-Wood)
  - Make server side copy account bytes and obey `--max-transfer` (Nick Craig-Wood)
  - Add `--create-empty-src-dirs` flag and default to not creating empty dirs (ishuah)
  - Add client side TLS/SSL flags `--ca-cert`/`--client-cert`/`--client-key` (Nick Craig-Wood)
  - Implement `--suffix-keep-extension` for use with `--suffix` (Nick Craig-Wood)
  - serve dlna: Add connection manager service description to improve compatibility (Dan Walters)
  - lsf: Add 'e' format to show encrypted names and 'o' for original IDs (Nick Craig-Wood)
  - lsjson: Added `--files-only` and `--dirs-only` flags (calistri)
  - rc: Implement operations/publiclink the equivalent of `rclone link` (Nick Craig-Wood)
  - Bug Fixes
  - accounting: Fix total ETA when `--stats-unit bits` is in effect (Nick Craig-Wood)
  - Bash TAB completion
  - Use private custom func to fix clash between rclone and kubectl (Nick Craig-Wood)
  - Fix for remotes with underscores in their names (Six)
  - Fix completion of remotes (Florian Gamböck)
  - Fix autocompletion of remote paths with spaces (Danil Semelenov)
  - serve dlna: Fix root XML service descriptor (Dan Walters)
  - ncdu: Fix display corruption with Chinese characters (Nick Craig-Wood)
  - Add SIGTERM to signals which run the exit handlers on unix (Nick Craig-Wood)
  - rc: Reload filter when the options are set via the rc (Nick Craig-Wood)
  - VFS / Mount
  - Fix FreeBSD: Ignore Truncate if called with no readers and already the correct size (Nick Craig-Wood)
  - Read directory and check for a file before mkdir (Nick Craig-Wood)
  - Shorten the locking window for vfs/refresh (Nick Craig-Wood)
  - Azure Blob
  - Enable MD5 checksums when uploading files bigger than the "Cutoff" (Dr.Rx)
  - Fix SAS URL support (Nick Craig-Wood)
  - B2
  - Allow manual configuration of backblaze downloadUrl (Vince)
  - Ignore already_hidden error on remove (Nick Craig-Wood)
  - Ignore malformed `src_last_modified_millis` (Nick Craig-Wood)
  - Drive
  - Add `--skip-checksum-gphotos` to ignore incorrect checksums on Google Photos (Nick Craig-Wood)
  - Allow server side move/copy between different remotes. (Fionera)
  - Add docs on team drives and `--fast-list` eventual consistency (Nestar47)
  - Fix imports of text files (Nick Craig-Wood)
  - Fix range requests on 0 length files (Nick Craig-Wood)
  - Fix creation of duplicates with server side copy (Nick Craig-Wood)
  - Dropbox
  - Retry blank errors to fix long listings (Nick Craig-Wood)
  - FTP
  - Add `--ftp-concurrency` to limit maximum number of connections (Nick Craig-Wood)
  - Google Cloud Storage
  - Fall back to default application credentials (marcintustin)
  - Allow bucket policy only buckets (Nick Craig-Wood)
  - HTTP
  - Add `--http-no-slash` for websites with directories with no slashes (Nick Craig-Wood)
  - Remove duplicates from listings (Nick Craig-Wood)
  - Fix socket leak on 404 errors (Nick Craig-Wood)
  - Jottacloud
  - Fix token refresh (Sebastian Bünger)
  - Add device registration (Oliver Heyme)
  - Onedrive
  - Implement graceful cancel of multipart uploads if rclone is interrupted (Cnly)
  - Always add trailing colon to path when addressing items, (Cnly)
  - Return errors instead of panic for invalid uploads (Fabian Möller)
  - S3
  - Add support for "Glacier Deep Archive" storage class (Manu)
  - Update Dreamhost endpoint (Nick Craig-Wood)
  - Note incompatibility with CEPH Jewel (Nick Craig-Wood)
  - SFTP
  - Allow custom ssh client config (Alexandru Bumbacea)
  - Swift
  - Obey Retry-After to enable OVH restore from cold storage (Nick Craig-Wood)
  - Work around token expiry on CEPH (Nick Craig-Wood)
  - WebDAV
  - Allow IsCollection property to be integer or boolean (Nick Craig-Wood)
  - Fix race when creating directories (Nick Craig-Wood)
  - Fix About/df when reading the available/total returns 0 (Nick Craig-Wood)
- Add bash-completion and zsh-completion support.</changelog>
</package>
<package pkgid="6442bc21245684e5a70061b5f5c6b9491eef4908fec835db0fa04beecd4ebff0" name="rclone-bash-completion" arch="noarch">
  <version epoch="0" ver="1.47.0" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1515844800">- Initial import of rclone v1.39, an rsync-like utility for cloud storage.</changelog>
  <changelog author="asarai@suse.com" date="1523620800">- Update to rclone v1.40.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200000">- Fix spec file causing build error (unresolvable) on Leap 42.3.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200001">- Update to rclone v1.41.
  * Too many changes to list, please see
    https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="asarai@suse.com" date="1529755200">- Update to rclone v1.42.
  See https://rclone.org/changelog/ for changelog.
- Switch to %license macro.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538049600">- Update to version v1.43.1
  * See https://rclone.org/changelog/ for the complete changelog.
- Switch to obs_scm</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543838400">- Update to version v1.45
  * See https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- Update to version 1.46:
  - New backends
  - Support Alibaba Cloud (Aliyun) OSS via the s3 backend (Nick Craig-Wood)
  - New commands
  - serve dlna: serves a remove via DLNA for the local network (nicolov)
  - New Features
  - copy, move: Restore deprecated --no-traverse flag (Nick Craig-Wood)
  - This is useful for when transferring a small number of files into a large destination
  - genautocomplete: Add remote path completion for bash completion (Christopher Peterson &amp; Danil Semelenov)
  - Buffer memory handling reworked to return memory to the OS better (Nick Craig-Wood)
  - Buffer recycling library to replace sync.Pool
  - Optionally use memory mapped memory for better memory shrinking
  - Enable with --use-mmap if having memory problems - not default yet
  - Parallelise reading of files specified by --files-from (Nick Craig-Wood)
  - check: Add stats showing total files matched. (Dario Guzik)
  - Allow rename/delete open files under Windows (Nick Craig-Wood)
  - lsjson: Use exactly the correct number of decimal places in the seconds (Nick Craig-Wood)
  - Add cookie support with cmdline switch --use-cookies for all HTTP based remotes (qip)
  - Warn if --checksum is set but there are no hashes available (Nick Craig-Wood)
  - Rework rate limiting (pacer) to be more accurate and allow bursting (Nick Craig-Wood)
  - Improve error reporting for too many/few arguments in commands (Nick Craig-Wood)
  - listremotes: Remove -l short flag as it conflicts with the new global flag (weetmuts)
  - Make http serving with auth generate INFO messages on auth fail (Nick Craig-Wood)
  - Bug Fixes
  - Fix layout of stats (Nick Craig-Wood)
  - Fix --progress crash under Windows Jenkins (Nick Craig-Wood)
  - Fix transfer of google/onedrive docs by calling Rcat in Copy when size is -1 (Cnly)
  - copyurl: Fix checking of --dry-run (Denis Skovpen)
  - Mount
  - Check that mountpoint and local directory to mount don?t overlap (Nick Craig-Wood)
  - Fix mount size under 32 bit Windows (Nick Craig-Wood)
  - VFS
  - Implement renaming of directories for backends without DirMove (Nick Craig-Wood)
  - now all backends except b2 support renaming directories
  - Implement --vfs-cache-max-size to limit the total size of the cache (Nick Craig-Wood)
  - Add --dir-perms and --file-perms flags to set default permissions (Nick Craig-Wood)
  - Fix deadlock on concurrent operations on a directory (Nick Craig-Wood)
  - Fix deadlock between RWFileHandle.close and File.Remove (Nick Craig-Wood)
  - Fix renaming/deleting open files with cache mode ?writes? under Windows (Nick Craig-Wood)
  - Fix panic on rename with --dry-run set (Nick Craig-Wood)
  - Fix vfs/refresh with recurse=true needing the --fast-list flag
  - Local
  - Add support for -l/--links (symbolic link translation) (yair@unicorn)
  - this works by showing links as link.rclonelink - see local backend docs for more info
  - this errors if used with -L/--copy-links
  - Fix renaming/deleting open files on Windows (Nick Craig-Wood)
  - Crypt
  - Check for maximum length before decrypting filename to fix panic (Garry McNulty)
  - Azure Blob
  - Allow building azureblob backend on *BSD (themylogin)
  - Use the rclone HTTP client to support --dump headers, --tpslimit etc (Nick Craig-Wood)
  - Use the s3 pacer for 0 delay in non error conditions (Nick Craig-Wood)
  - Ignore directory markers (Nick Craig-Wood)
  - Stop Mkdir attempting to create existing containers (Nick Craig-Wood)
  - B2
  - cleanup: will remove unfinished large files &gt;24hrs old (Garry McNulty)
  - For a bucket limited application key check the bucket name (Nick Craig-Wood)
  - before this, rclone would use the authorised bucket regardless of what you put on the command line
  - Added --b2-disable-checksum flag (Wojciech Smigielski)
  - this enables large files to be uploaded without a SHA-1 hash for speed reasons
  - Drive
  - Set default pacer to 100ms for 10 tps (Nick Craig-Wood)
  - This fits the Google defaults much better and reduces the 403 errors massively
  - Add --drive-pacer-min-sleep and --drive-pacer-burst to control the pacer
  - Improve ChangeNotify support for items with multiple parents (Fabian Möller)
  - Fix ListR for items with multiple parents - this fixes oddities with vfs/refresh (Fabian Möller)
  - Fix using --drive-impersonate and appfolders (Nick Craig-Wood)
  - Fix google docs in rclone mount for some (not all) applications (Nick Craig-Wood)
  - Dropbox
  - Retry-After support for Dropbox backend (Mathieu Carbou)
  - FTP
  - Wait for 60 seconds for a connection to Close then declare it dead (Nick Craig-Wood)
  - helps with indefinite hangs on some FTP servers
  - Google Cloud Storage
  - Update google cloud storage endpoints (weetmuts)
  - HTTP
  - Add an example with username and password which is supported but wasn?t documented (Nick Craig-Wood)
  - Fix backend with --files-from and non-existent files (Nick Craig-Wood)
  - Hubic
  - Make error message more informative if authentication fails (Nick Craig-Wood)
  - Jottacloud
  - Resume and deduplication support (Oliver Heyme)
  - Use token auth for all API requests Don?t store password anymore (Sebastian Bünger)
  - Add support for 2-factor authentification (Sebastian Bünger)
  - Mega
  - Implement v2 account login which fixes logins for newer Mega accounts (Nick Craig-Wood)
  - Return error if an unknown length file is attempted to be uploaded (Nick Craig-Wood)
  - Add new error codes for better error reporting (Nick Craig-Wood)
  - Onedrive
  - Fix broken support for ?shared with me? folders (Alex Chen)
  - Fix root ID not normalised (Cnly)
  - Return err instead of panic on unknown-sized uploads (Cnly)
  - Qingstor
  - Fix go routine leak on multipart upload errors (Nick Craig-Wood)
  - Add upload chunk size/concurrency/cutoff control (Nick Craig-Wood)
  - Default --qingstor-upload-concurrency to 1 to work around bug (Nick Craig-Wood)
  - S3
  - Implement --s3-upload-cutoff for single part uploads below this (Nick Craig-Wood)
  - Change --s3-upload-concurrency default to 4 to increase perfomance (Nick Craig-Wood)
  - Add --s3-bucket-acl to control bucket ACL (Nick Craig-Wood)
  - Auto detect region for buckets on operation failure (Nick Craig-Wood)
  - Add GLACIER storage class (William Cocker)
  - Add Scaleway to s3 documentation (Rémy Léone)
  - Add AWS endpoint eu-north-1 (weetmuts)
  - SFTP
  - Add support for PEM encrypted private keys (Fabian Möller)
  - Add option to force the usage of an ssh-agent (Fabian Möller)
  - Perform environment variable expansion on key-file (Fabian Möller)
  - Fix rmdir on Windows based servers (eg CrushFTP) (Nick Craig-Wood)
  - Fix rmdir deleting directory contents on some SFTP servers (Nick Craig-Wood)
  - Fix error on dangling symlinks (Nick Craig-Wood)
  - Swift
  - Add --swift-no-chunk to disable segmented uploads in rcat/mount (Nick Craig-Wood)
  - Introduce application credential auth support (kayrus)
  - Fix memory usage by slimming Object (Nick Craig-Wood)
  - Fix extra requests on upload (Nick Craig-Wood)
  - Fix reauth on big files (Nick Craig-Wood)
  - Union
  - Fix poll-interval not working (Nick Craig-Wood)
  - WebDAV
  - Support About which means rclone mount will show the correct disk size (Nick Craig-Wood)
  - Support MD5 and SHA1 hashes with Owncloud and Nextcloud (Nick Craig-Wood)
  - Fail soft on time parsing errors (Nick Craig-Wood)
  - Fix infinite loop on failed directory creation (Nick Craig-Wood)
  - Fix identification of directories for Bitrix Site Manager (Nick Craig-Wood)
  - Fix upload of 0 length files on some servers (Nick Craig-Wood)
  - Fix if MKCOL fails with 423 Locked assume the directory exists (Nick Craig-Wood)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564801">- bump required go to 1.11 as we are using the mod support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Update to version 1.47.0. boo#1137685
  - New backends
  - Backend for Koofr cloud storage service. (jaKa)
  - New Features
  - Resume downloads if the reader fails in copy (Nick Craig-Wood)
  - Use `--fast-list` for listing operations where it won't use more memory (Nick Craig-Wood)
  - Make `--files-from` traverse the destination unless `--no-traverse` is set (Nick Craig-Wood)
  - Make server side copy account bytes and obey `--max-transfer` (Nick Craig-Wood)
  - Add `--create-empty-src-dirs` flag and default to not creating empty dirs (ishuah)
  - Add client side TLS/SSL flags `--ca-cert`/`--client-cert`/`--client-key` (Nick Craig-Wood)
  - Implement `--suffix-keep-extension` for use with `--suffix` (Nick Craig-Wood)
  - serve dlna: Add connection manager service description to improve compatibility (Dan Walters)
  - lsf: Add 'e' format to show encrypted names and 'o' for original IDs (Nick Craig-Wood)
  - lsjson: Added `--files-only` and `--dirs-only` flags (calistri)
  - rc: Implement operations/publiclink the equivalent of `rclone link` (Nick Craig-Wood)
  - Bug Fixes
  - accounting: Fix total ETA when `--stats-unit bits` is in effect (Nick Craig-Wood)
  - Bash TAB completion
  - Use private custom func to fix clash between rclone and kubectl (Nick Craig-Wood)
  - Fix for remotes with underscores in their names (Six)
  - Fix completion of remotes (Florian Gamböck)
  - Fix autocompletion of remote paths with spaces (Danil Semelenov)
  - serve dlna: Fix root XML service descriptor (Dan Walters)
  - ncdu: Fix display corruption with Chinese characters (Nick Craig-Wood)
  - Add SIGTERM to signals which run the exit handlers on unix (Nick Craig-Wood)
  - rc: Reload filter when the options are set via the rc (Nick Craig-Wood)
  - VFS / Mount
  - Fix FreeBSD: Ignore Truncate if called with no readers and already the correct size (Nick Craig-Wood)
  - Read directory and check for a file before mkdir (Nick Craig-Wood)
  - Shorten the locking window for vfs/refresh (Nick Craig-Wood)
  - Azure Blob
  - Enable MD5 checksums when uploading files bigger than the "Cutoff" (Dr.Rx)
  - Fix SAS URL support (Nick Craig-Wood)
  - B2
  - Allow manual configuration of backblaze downloadUrl (Vince)
  - Ignore already_hidden error on remove (Nick Craig-Wood)
  - Ignore malformed `src_last_modified_millis` (Nick Craig-Wood)
  - Drive
  - Add `--skip-checksum-gphotos` to ignore incorrect checksums on Google Photos (Nick Craig-Wood)
  - Allow server side move/copy between different remotes. (Fionera)
  - Add docs on team drives and `--fast-list` eventual consistency (Nestar47)
  - Fix imports of text files (Nick Craig-Wood)
  - Fix range requests on 0 length files (Nick Craig-Wood)
  - Fix creation of duplicates with server side copy (Nick Craig-Wood)
  - Dropbox
  - Retry blank errors to fix long listings (Nick Craig-Wood)
  - FTP
  - Add `--ftp-concurrency` to limit maximum number of connections (Nick Craig-Wood)
  - Google Cloud Storage
  - Fall back to default application credentials (marcintustin)
  - Allow bucket policy only buckets (Nick Craig-Wood)
  - HTTP
  - Add `--http-no-slash` for websites with directories with no slashes (Nick Craig-Wood)
  - Remove duplicates from listings (Nick Craig-Wood)
  - Fix socket leak on 404 errors (Nick Craig-Wood)
  - Jottacloud
  - Fix token refresh (Sebastian Bünger)
  - Add device registration (Oliver Heyme)
  - Onedrive
  - Implement graceful cancel of multipart uploads if rclone is interrupted (Cnly)
  - Always add trailing colon to path when addressing items, (Cnly)
  - Return errors instead of panic for invalid uploads (Fabian Möller)
  - S3
  - Add support for "Glacier Deep Archive" storage class (Manu)
  - Update Dreamhost endpoint (Nick Craig-Wood)
  - Note incompatibility with CEPH Jewel (Nick Craig-Wood)
  - SFTP
  - Allow custom ssh client config (Alexandru Bumbacea)
  - Swift
  - Obey Retry-After to enable OVH restore from cold storage (Nick Craig-Wood)
  - Work around token expiry on CEPH (Nick Craig-Wood)
  - WebDAV
  - Allow IsCollection property to be integer or boolean (Nick Craig-Wood)
  - Fix race when creating directories (Nick Craig-Wood)
  - Fix About/df when reading the available/total returns 0 (Nick Craig-Wood)
- Add bash-completion and zsh-completion support.</changelog>
</package>
<package pkgid="265bab6efe8721075433125abae623e9bd50ed19725d64f48a7042cedb396398" name="rclone-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.47.0" rel="lp151.3.3.1"/>
  <changelog author="asarai@suse.com" date="1515844800">- Initial import of rclone v1.39, an rsync-like utility for cloud storage.</changelog>
  <changelog author="asarai@suse.com" date="1523620800">- Update to rclone v1.40.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200000">- Fix spec file causing build error (unresolvable) on Leap 42.3.</changelog>
  <changelog author="jacobwinski@gmail.com" date="1528200001">- Update to rclone v1.41.
  * Too many changes to list, please see
    https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="asarai@suse.com" date="1529755200">- Update to rclone v1.42.
  See https://rclone.org/changelog/ for changelog.
- Switch to %license macro.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538049600">- Update to version v1.43.1
  * See https://rclone.org/changelog/ for the complete changelog.
- Switch to obs_scm</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1543838400">- Update to version v1.45
  * See https://rclone.org/changelog/ for the complete changelog.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564800">- Update to version 1.46:
  - New backends
  - Support Alibaba Cloud (Aliyun) OSS via the s3 backend (Nick Craig-Wood)
  - New commands
  - serve dlna: serves a remove via DLNA for the local network (nicolov)
  - New Features
  - copy, move: Restore deprecated --no-traverse flag (Nick Craig-Wood)
  - This is useful for when transferring a small number of files into a large destination
  - genautocomplete: Add remote path completion for bash completion (Christopher Peterson &amp; Danil Semelenov)
  - Buffer memory handling reworked to return memory to the OS better (Nick Craig-Wood)
  - Buffer recycling library to replace sync.Pool
  - Optionally use memory mapped memory for better memory shrinking
  - Enable with --use-mmap if having memory problems - not default yet
  - Parallelise reading of files specified by --files-from (Nick Craig-Wood)
  - check: Add stats showing total files matched. (Dario Guzik)
  - Allow rename/delete open files under Windows (Nick Craig-Wood)
  - lsjson: Use exactly the correct number of decimal places in the seconds (Nick Craig-Wood)
  - Add cookie support with cmdline switch --use-cookies for all HTTP based remotes (qip)
  - Warn if --checksum is set but there are no hashes available (Nick Craig-Wood)
  - Rework rate limiting (pacer) to be more accurate and allow bursting (Nick Craig-Wood)
  - Improve error reporting for too many/few arguments in commands (Nick Craig-Wood)
  - listremotes: Remove -l short flag as it conflicts with the new global flag (weetmuts)
  - Make http serving with auth generate INFO messages on auth fail (Nick Craig-Wood)
  - Bug Fixes
  - Fix layout of stats (Nick Craig-Wood)
  - Fix --progress crash under Windows Jenkins (Nick Craig-Wood)
  - Fix transfer of google/onedrive docs by calling Rcat in Copy when size is -1 (Cnly)
  - copyurl: Fix checking of --dry-run (Denis Skovpen)
  - Mount
  - Check that mountpoint and local directory to mount don?t overlap (Nick Craig-Wood)
  - Fix mount size under 32 bit Windows (Nick Craig-Wood)
  - VFS
  - Implement renaming of directories for backends without DirMove (Nick Craig-Wood)
  - now all backends except b2 support renaming directories
  - Implement --vfs-cache-max-size to limit the total size of the cache (Nick Craig-Wood)
  - Add --dir-perms and --file-perms flags to set default permissions (Nick Craig-Wood)
  - Fix deadlock on concurrent operations on a directory (Nick Craig-Wood)
  - Fix deadlock between RWFileHandle.close and File.Remove (Nick Craig-Wood)
  - Fix renaming/deleting open files with cache mode ?writes? under Windows (Nick Craig-Wood)
  - Fix panic on rename with --dry-run set (Nick Craig-Wood)
  - Fix vfs/refresh with recurse=true needing the --fast-list flag
  - Local
  - Add support for -l/--links (symbolic link translation) (yair@unicorn)
  - this works by showing links as link.rclonelink - see local backend docs for more info
  - this errors if used with -L/--copy-links
  - Fix renaming/deleting open files on Windows (Nick Craig-Wood)
  - Crypt
  - Check for maximum length before decrypting filename to fix panic (Garry McNulty)
  - Azure Blob
  - Allow building azureblob backend on *BSD (themylogin)
  - Use the rclone HTTP client to support --dump headers, --tpslimit etc (Nick Craig-Wood)
  - Use the s3 pacer for 0 delay in non error conditions (Nick Craig-Wood)
  - Ignore directory markers (Nick Craig-Wood)
  - Stop Mkdir attempting to create existing containers (Nick Craig-Wood)
  - B2
  - cleanup: will remove unfinished large files &gt;24hrs old (Garry McNulty)
  - For a bucket limited application key check the bucket name (Nick Craig-Wood)
  - before this, rclone would use the authorised bucket regardless of what you put on the command line
  - Added --b2-disable-checksum flag (Wojciech Smigielski)
  - this enables large files to be uploaded without a SHA-1 hash for speed reasons
  - Drive
  - Set default pacer to 100ms for 10 tps (Nick Craig-Wood)
  - This fits the Google defaults much better and reduces the 403 errors massively
  - Add --drive-pacer-min-sleep and --drive-pacer-burst to control the pacer
  - Improve ChangeNotify support for items with multiple parents (Fabian Möller)
  - Fix ListR for items with multiple parents - this fixes oddities with vfs/refresh (Fabian Möller)
  - Fix using --drive-impersonate and appfolders (Nick Craig-Wood)
  - Fix google docs in rclone mount for some (not all) applications (Nick Craig-Wood)
  - Dropbox
  - Retry-After support for Dropbox backend (Mathieu Carbou)
  - FTP
  - Wait for 60 seconds for a connection to Close then declare it dead (Nick Craig-Wood)
  - helps with indefinite hangs on some FTP servers
  - Google Cloud Storage
  - Update google cloud storage endpoints (weetmuts)
  - HTTP
  - Add an example with username and password which is supported but wasn?t documented (Nick Craig-Wood)
  - Fix backend with --files-from and non-existent files (Nick Craig-Wood)
  - Hubic
  - Make error message more informative if authentication fails (Nick Craig-Wood)
  - Jottacloud
  - Resume and deduplication support (Oliver Heyme)
  - Use token auth for all API requests Don?t store password anymore (Sebastian Bünger)
  - Add support for 2-factor authentification (Sebastian Bünger)
  - Mega
  - Implement v2 account login which fixes logins for newer Mega accounts (Nick Craig-Wood)
  - Return error if an unknown length file is attempted to be uploaded (Nick Craig-Wood)
  - Add new error codes for better error reporting (Nick Craig-Wood)
  - Onedrive
  - Fix broken support for ?shared with me? folders (Alex Chen)
  - Fix root ID not normalised (Cnly)
  - Return err instead of panic on unknown-sized uploads (Cnly)
  - Qingstor
  - Fix go routine leak on multipart upload errors (Nick Craig-Wood)
  - Add upload chunk size/concurrency/cutoff control (Nick Craig-Wood)
  - Default --qingstor-upload-concurrency to 1 to work around bug (Nick Craig-Wood)
  - S3
  - Implement --s3-upload-cutoff for single part uploads below this (Nick Craig-Wood)
  - Change --s3-upload-concurrency default to 4 to increase perfomance (Nick Craig-Wood)
  - Add --s3-bucket-acl to control bucket ACL (Nick Craig-Wood)
  - Auto detect region for buckets on operation failure (Nick Craig-Wood)
  - Add GLACIER storage class (William Cocker)
  - Add Scaleway to s3 documentation (Rémy Léone)
  - Add AWS endpoint eu-north-1 (weetmuts)
  - SFTP
  - Add support for PEM encrypted private keys (Fabian Möller)
  - Add option to force the usage of an ssh-agent (Fabian Möller)
  - Perform environment variable expansion on key-file (Fabian Möller)
  - Fix rmdir on Windows based servers (eg CrushFTP) (Nick Craig-Wood)
  - Fix rmdir deleting directory contents on some SFTP servers (Nick Craig-Wood)
  - Fix error on dangling symlinks (Nick Craig-Wood)
  - Swift
  - Add --swift-no-chunk to disable segmented uploads in rcat/mount (Nick Craig-Wood)
  - Introduce application credential auth support (kayrus)
  - Fix memory usage by slimming Object (Nick Craig-Wood)
  - Fix extra requests on upload (Nick Craig-Wood)
  - Fix reauth on big files (Nick Craig-Wood)
  - Union
  - Fix poll-interval not working (Nick Craig-Wood)
  - WebDAV
  - Support About which means rclone mount will show the correct disk size (Nick Craig-Wood)
  - Support MD5 and SHA1 hashes with Owncloud and Nextcloud (Nick Craig-Wood)
  - Fail soft on time parsing errors (Nick Craig-Wood)
  - Fix infinite loop on failed directory creation (Nick Craig-Wood)
  - Fix identification of directories for Bitrix Site Manager (Nick Craig-Wood)
  - Fix upload of 0 length files on some servers (Nick Craig-Wood)
  - Fix if MKCOL fails with 423 Locked assume the directory exists (Nick Craig-Wood)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552564801">- bump required go to 1.11 as we are using the mod support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1560081600">- Update to version 1.47.0. boo#1137685
  - New backends
  - Backend for Koofr cloud storage service. (jaKa)
  - New Features
  - Resume downloads if the reader fails in copy (Nick Craig-Wood)
  - Use `--fast-list` for listing operations where it won't use more memory (Nick Craig-Wood)
  - Make `--files-from` traverse the destination unless `--no-traverse` is set (Nick Craig-Wood)
  - Make server side copy account bytes and obey `--max-transfer` (Nick Craig-Wood)
  - Add `--create-empty-src-dirs` flag and default to not creating empty dirs (ishuah)
  - Add client side TLS/SSL flags `--ca-cert`/`--client-cert`/`--client-key` (Nick Craig-Wood)
  - Implement `--suffix-keep-extension` for use with `--suffix` (Nick Craig-Wood)
  - serve dlna: Add connection manager service description to improve compatibility (Dan Walters)
  - lsf: Add 'e' format to show encrypted names and 'o' for original IDs (Nick Craig-Wood)
  - lsjson: Added `--files-only` and `--dirs-only` flags (calistri)
  - rc: Implement operations/publiclink the equivalent of `rclone link` (Nick Craig-Wood)
  - Bug Fixes
  - accounting: Fix total ETA when `--stats-unit bits` is in effect (Nick Craig-Wood)
  - Bash TAB completion
  - Use private custom func to fix clash between rclone and kubectl (Nick Craig-Wood)
  - Fix for remotes with underscores in their names (Six)
  - Fix completion of remotes (Florian Gamböck)
  - Fix autocompletion of remote paths with spaces (Danil Semelenov)
  - serve dlna: Fix root XML service descriptor (Dan Walters)
  - ncdu: Fix display corruption with Chinese characters (Nick Craig-Wood)
  - Add SIGTERM to signals which run the exit handlers on unix (Nick Craig-Wood)
  - rc: Reload filter when the options are set via the rc (Nick Craig-Wood)
  - VFS / Mount
  - Fix FreeBSD: Ignore Truncate if called with no readers and already the correct size (Nick Craig-Wood)
  - Read directory and check for a file before mkdir (Nick Craig-Wood)
  - Shorten the locking window for vfs/refresh (Nick Craig-Wood)
  - Azure Blob
  - Enable MD5 checksums when uploading files bigger than the "Cutoff" (Dr.Rx)
  - Fix SAS URL support (Nick Craig-Wood)
  - B2
  - Allow manual configuration of backblaze downloadUrl (Vince)
  - Ignore already_hidden error on remove (Nick Craig-Wood)
  - Ignore malformed `src_last_modified_millis` (Nick Craig-Wood)
  - Drive
  - Add `--skip-checksum-gphotos` to ignore incorrect checksums on Google Photos (Nick Craig-Wood)
  - Allow server side move/copy between different remotes. (Fionera)
  - Add docs on team drives and `--fast-list` eventual consistency (Nestar47)
  - Fix imports of text files (Nick Craig-Wood)
  - Fix range requests on 0 length files (Nick Craig-Wood)
  - Fix creation of duplicates with server side copy (Nick Craig-Wood)
  - Dropbox
  - Retry blank errors to fix long listings (Nick Craig-Wood)
  - FTP
  - Add `--ftp-concurrency` to limit maximum number of connections (Nick Craig-Wood)
  - Google Cloud Storage
  - Fall back to default application credentials (marcintustin)
  - Allow bucket policy only buckets (Nick Craig-Wood)
  - HTTP
  - Add `--http-no-slash` for websites with directories with no slashes (Nick Craig-Wood)
  - Remove duplicates from listings (Nick Craig-Wood)
  - Fix socket leak on 404 errors (Nick Craig-Wood)
  - Jottacloud
  - Fix token refresh (Sebastian Bünger)
  - Add device registration (Oliver Heyme)
  - Onedrive
  - Implement graceful cancel of multipart uploads if rclone is interrupted (Cnly)
  - Always add trailing colon to path when addressing items, (Cnly)
  - Return errors instead of panic for invalid uploads (Fabian Möller)
  - S3
  - Add support for "Glacier Deep Archive" storage class (Manu)
  - Update Dreamhost endpoint (Nick Craig-Wood)
  - Note incompatibility with CEPH Jewel (Nick Craig-Wood)
  - SFTP
  - Allow custom ssh client config (Alexandru Bumbacea)
  - Swift
  - Obey Retry-After to enable OVH restore from cold storage (Nick Craig-Wood)
  - Work around token expiry on CEPH (Nick Craig-Wood)
  - WebDAV
  - Allow IsCollection property to be integer or boolean (Nick Craig-Wood)
  - Fix race when creating directories (Nick Craig-Wood)
  - Fix About/df when reading the available/total returns 0 (Nick Craig-Wood)
- Add bash-completion and zsh-completion support.</changelog>
</package>
<package pkgid="232eefc83e555bbea9bcd3b831238279a4cff0e81a77afc91360bfff55a2bf6a" name="rdma-core" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="3366832170a18e65b68c4f83a5e8a20613255545498cf2102e6a0d9b741ead2d" name="rdma-core" arch="src">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="4e68d5032b1a2a830f4357f9d80ee16c23cb3cc0b1a22f9dfbd0bdef979ebd24" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="267782d878fbb6165f02bc9c71cdabded02ede59d398ab4070f21450aa92ca5d" name="rdma-core-devel" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="d875d11629aa8086b5c3048d21142e198605a656136fa0005ba51bb666785d7f" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="3f3389102be6e6c2c3e0e87e252fac9609c955e8fce44e9b965efd67570e75e3" name="rdma-core-devel-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="07eae052ea994e0cce62ad20f89f7c5d8a472156a212568cb799cc29c510ff89" name="rdma-ndd" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="7a5e25036d3f3aac59c35ffc2305769e96a27e317122bda6398699df213616f7" name="rdma-ndd" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="8d9423372c554334ab972c1faac4f5b9f6ab67d7420ef54fe409dfc19e03d980" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="db9bdf152bfc623dfd1b78f3cd0f337ed91c6a4b1aa2426a0f5d2eb34568e0ff" name="resource-agents" arch="src">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="65d606b7547ebce92471ac2f5b64d761c899c9e178c447a1997464672e5b2212" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.2.0+git157.40de8382" rel="lp151.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1516190400">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
</package>
<package pkgid="b4ac99c04a993ed8538b80548e4f77e3b2e348fee77ccbb27a134361bb72e65a" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="5072b3edcc4136f46e98877a45ad2bb78b41ac70f55ca8f165eb6d7bd7f4cda6" name="resource-agents" arch="src">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="094da585ac663f9332711ddb1e152c87c96eb1b82460b19dc97eac05df50a1f9" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.3.018.a7fb5035" rel="lp151.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Require /usr/bin/logger (provided by util-linux-systemd)</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.1.1+git70.00ae6a17:
  * Medium: pgsql: Fix incorrect SQL is selected with PostgreSQL 11 or later.
  * log the error message in abnormal_end() function even when we are in 'stop' operation so it is clear from logs on how did we end up here
  * Medium: SAPInstance: Add monitored services for ENSA2 (bsc#1092384)
  * Squid: cleanup description for squid_port parameter
  * ldirectord: add manpage to service documentation
  * Medium: Add openstack resource agents
  * findif: improve IPv6 NIC detection
  * awseip: fix allocation_id not found error
  * awsvip: get secondary-private-ip more precisely
  * awsvip: get network-id from meta-data directly
  * syslog-ng: added note that qdisk_dir is only supported in PE6
  * syslog-ng: merge Premium Edition 6 and 7 code into main agent
  * send_arp: dont use "-Wcast-align" due to false-positive fail on ARM.
  * gcp-vpc-move-ip: fix bash path-detection
  * enable chap authentication for lio-t iscsi target implementation. if attribute 'incoming_username' is set: enable attribute 'authentication', disable attribute 'generate_node_acls' and set chap 'userid' and 'password' for each 'allowed_initiator'
  * Low: exportfs: Fix inconsistent whitespace in exportfs_monitor
  * Medium: exportfs: Fix square bracket stripping in clientspec
  * Low: VirtualDomain: fix warning messages in log
  * New RA that manage IP moving in GCP</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 / Leap 42:
  * High: oracle: Fix alter user syntax for set_mon_user_profile (bsc#1089279)
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
- Obsoletes the following patches (SLE 12 / Leap 42):
  * 0001-High-oracle-Fix-alter-user-syntax-for-set_mon_user_p.patch
  * 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
  * 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
  * 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
  * 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch
  * 0014-VirtualDomain-Properly-migrate-VMs-on-node-shutdown-.patch
  * 0015-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0016-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * 0017-Low-aws-vpc-route53-Fix-missing-ocf_log-in-log-messa.patch
  * 0018-Medium-aws-vpc-route53-Fix-tempfile-race-bsc-1059312.patch
  * 0019-Dev-aws-vpc-route53-Eliminate-duplicated-code.patch
  * 0020-Dev-aws-vpc-route53-Clean-up-logging.patch
  * 0021-Low-Raid1-remove-unnecessary-wait-flags-bsc-1077416.patch
  * 0022-Medium-Raid1-Ignore-transient-devices-after-stopping.patch</changelog>
  <changelog author="dakechi@suse.com" date="1533816000">- Update to version 4.1.1+git118.9a4fbd24:
  * SAPInstance: Improved SAP instance profile detection (bsc#1096744)
  * findif: only match lines containing netmasks
  * SAPInstance: Improved indents (bsc#1096744)
  * SAPInstance: implemeted reload method (bsc#1096744)
  * build: add missing manpages
  * aliyun-vpc-move-ip: fix manpage (fate#326557)
  * aliyun-vpc-move-ip: fixes. (fate#326557)
  * Add Aliyun vpc-move-ip agent. (fate#326557)
  * gcp-vpc-move-route.in: minor fixes
  * gcp-vpc-move-route.in: move stackdriver parameter
  * gcp-vpc-move-vip.in: filter call to aggregatedList
  * gcp-vpc-move-ip.in: add deprecation message
  * gcp-vpc-move-route.in: python implementation of gcp-vpc-move-ip.in
  * Do not call ocf_attribute_target in the meta-data function
  * sfex: fixes to avoid errors with latest gcc
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vcp-move-vip.in: implement validate-all
  * gcp-vpc-move-vip.in: minor fixes
  * gcp-vpc-move-vip.in: manage ip alias
  * CI: skip Python agents in shellcheck
  * configure: add Python path detection
  * Volume groups and logical volumes "-" in their name get mangled with double dashes in dmsetup.  Switching to wc and just counting lines while depending on the vgname + lvname filter in the dmsetup call gets around the issue with dmsetup outputting correctly but grep failing due to the name mangle.
  * Mid: IPaddr2: Change return code.
  * ra-dev-guide: update instructions for GitHub
  * sybaseASE: bash path-detection
  * sybaseASE: new resource agent
  * gcp-vpc-move-ip: check specificed gcloud binary in validate</changelog>
  <changelog author="abriel@suse.com" date="1536062400">- Update to version 4.1.1+git165.1ddbf85d:
  * Add Python library
  * gcp-vpc-move-vip: use Python library
  * gcp-vpc-move-vip: moved alias-parameters to top of metadata
  * gcp-vpc-move-route: use Python library
  * Python: add logging.basicConfig() to support background logging
  * CTDB: fix incorrect db corruption reports (bsc#1101668)
  * CTDB: explicitly use bash shell
  * CTDB: fix OCF_RESKEY_ctdb_recovery_lock validation (bsc#1088692)
  * aws-vpc-move-ip: Use ip utility to check address
  * rabbitmq-cluster: retry start when cluster join fails
  * ipsec: Add tunnel fallback option
  * LVM: fix missing dash (bsc#1104900)
  * Remove output redirection to file in /tmp
  * Medium: mysql: Remove obsolete DEBUG_LOG functionality (bsc#1021689)
  * lvmlockd: add cmirrord support
  * Initial podman support
  * LVM-activate: return OCF_ERR_CONFIGURED for incorrect vg_access_mode
  * spec: fix some overkil path-based Requires, trailing whitespace, thinko
  * rabbitmq-cluster: get cluster status from mnesia during monitor
  * aws-vpc-move-ip: Fix broken shell quoting
  * Filesystem: Support symlink as mountpoint directory
  * aliyun-vpc-move-ip: improve metadata and manpage
  * aws-vpc-move-ip: Check the rounting table also during monitor probe action ((bsc#1106707)
  * aws-vpc-move-ip: Force text output during awscli call ((bsc#1106707)
  * aws-vpc-move-ip: Included the address param for backward compat. Evaluate if the address param is set and if the ip para is null, and set the ip param with the address value. ((bsc#1106707)
  * pgsql: Avoid the change of /dev/null to postgres owner/group The check_log_file performs a -f test on the logfile which is set to /dev/null by default, and it returns 1 for non-regular files. (bsc#1090882)
  * Filesystem: Canonicalize mountpoint symlinks</changelog>
  <changelog author="dakechi@suse.com" date="1536321600">- Created the symlink for the suse:aws-vpc-move-ip RA for backward
  compatibility reasons. The package aws-vpc-move-ip will be dropped
  and the Upstream resource agent will be the only one maintained.
  (fate#326697)</changelog>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="varkoly@suse.com" date="1562673600">- Update to version 4.3.018.a7fb5035:
  (bsc#1140874) Include the latest aws-vpc-route53 bug fixes and
    improvements from upstream.
  * aws-vpc-route53: Removed absolute path for awk command.
    Tuning on dig timeout on r53_monitor function
    Changes and improvements to r53_start r53_stop _update_record
    and r53_monitor functions.
    Add --cli-connect-timeout 10 option to AWS CLI.
    Replace ec2metada with curl to fetch the IP address directlyi
    from EC2 metadata.</changelog>
</package>
<package pkgid="e78ebe54c4b91c97166dcb2b049f5c7aac2627d13728b3c43628dd2a266b5e85" name="rmt-server" arch="src">
  <version epoch="0" ver="2.3.1" rel="lp151.2.3.1"/>
  <changelog author="skotov@suse.com" date="1550491200">- Version 1.2.1
- Truncate the RMT lockfile when writing a new PID (bsc#1125770)
- Zypper authentication plugin (fate#326629)
- Fix nested serializers in system/activations
- Fix HTTP vhost config</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1550750400">- Version 1.2.2
- Set CURLOPT_LOW_SPEED_LIMIT to prevent downloads from getting stuck (bsc#1107806)
- Removed use-ruby-2.5-in-rails.patch, use-ruby-2.5-in-rmt-data-import.patch and
  use-ruby-2.5-in-rmt-cli.patch as they are no longer needed.</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1552305600">- Added the ability to mirror the SUMA product tree.</changelog>
  <changelog author="Hernan Schmidt &lt;hschmidt@suse.com&gt;" date="1552392000">- Version 1.2.3
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1552478400">- Version 1.2.4
- Supply log severity to journald</changelog>
  <changelog author="tmuntaner@suse.com" date="1552910400">- Version 1.2.5
- Updated rails to version 5.1.6.2 (CVE-2019-5419: bsc#1129271)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1553083200">- Version 1.2.6
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Add a script to manually test registration sharing</changelog>
  <changelog author="skotov@suse.com" date="1553169600">- Version 1.2.7
- Online migrations will automatically add additional modules
  to the client systems depending on the base product</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1554206400">- Version 1.2.8
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module</changelog>
  <changelog author="tmuntaner@suse.com" date="1555502400">- Version 2.0.0
- Breaking Change: Added headers to generated CSV files</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1556107200">- Version 2.1.0
- Updated dependency nokogiri to 1.10.3 (CVE-2019-11068: bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557144000">- Version 2.1.1
- Make SMT data import scripts faster (bsc#1134190)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557316800">- Version 2.1.2
- Make service IDs consistent across different RMT instances (bsc#1134428)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557748800">- Version 2.1.3
- Mirror additional repos that were enabled during mirroring (bsc#1132690)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557921600">- Version 2.1.4
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)</changelog>
  <changelog author="Leon Schroeder &lt;lschroeder@suse.com&gt;" date="1559822400">- Version 2.1.5
- Fix create UUID when system_uuid file empty (bsc#1138316)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1560513600">- Version 2.2.0
- Add `rmt-cli systems list` command to list registered systems</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1561550400">- Version 2.2.1
- Fix dependency to removed boot_cli_i18n file (bsc#1136020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1561982400">- Version 2.3.0
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1562328000">- Version 2.3.1
- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel</changelog>
</package>
<package pkgid="343cc128f036dc0615546f746f1a79ddc6c6066cbdee874214862e1d74440a91" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp151.2.3.1"/>
  <changelog author="skotov@suse.com" date="1550491200">- Version 1.2.1
- Truncate the RMT lockfile when writing a new PID (bsc#1125770)
- Zypper authentication plugin (fate#326629)
- Fix nested serializers in system/activations
- Fix HTTP vhost config</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1550750400">- Version 1.2.2
- Set CURLOPT_LOW_SPEED_LIMIT to prevent downloads from getting stuck (bsc#1107806)
- Removed use-ruby-2.5-in-rails.patch, use-ruby-2.5-in-rmt-data-import.patch and
  use-ruby-2.5-in-rmt-cli.patch as they are no longer needed.</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1552305600">- Added the ability to mirror the SUMA product tree.</changelog>
  <changelog author="Hernan Schmidt &lt;hschmidt@suse.com&gt;" date="1552392000">- Version 1.2.3
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1552478400">- Version 1.2.4
- Supply log severity to journald</changelog>
  <changelog author="tmuntaner@suse.com" date="1552910400">- Version 1.2.5
- Updated rails to version 5.1.6.2 (CVE-2019-5419: bsc#1129271)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1553083200">- Version 1.2.6
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Add a script to manually test registration sharing</changelog>
  <changelog author="skotov@suse.com" date="1553169600">- Version 1.2.7
- Online migrations will automatically add additional modules
  to the client systems depending on the base product</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1554206400">- Version 1.2.8
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module</changelog>
  <changelog author="tmuntaner@suse.com" date="1555502400">- Version 2.0.0
- Breaking Change: Added headers to generated CSV files</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1556107200">- Version 2.1.0
- Updated dependency nokogiri to 1.10.3 (CVE-2019-11068: bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557144000">- Version 2.1.1
- Make SMT data import scripts faster (bsc#1134190)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557316800">- Version 2.1.2
- Make service IDs consistent across different RMT instances (bsc#1134428)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557748800">- Version 2.1.3
- Mirror additional repos that were enabled during mirroring (bsc#1132690)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557921600">- Version 2.1.4
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)</changelog>
  <changelog author="Leon Schroeder &lt;lschroeder@suse.com&gt;" date="1559822400">- Version 2.1.5
- Fix create UUID when system_uuid file empty (bsc#1138316)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1560513600">- Version 2.2.0
- Add `rmt-cli systems list` command to list registered systems</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1561550400">- Version 2.2.1
- Fix dependency to removed boot_cli_i18n file (bsc#1136020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1561982400">- Version 2.3.0
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1562328000">- Version 2.3.1
- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel</changelog>
</package>
<package pkgid="2dd096ee9e0d244a87e126ce0ee3b7790e69c827d578447d5bc37a754018ccf1" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp151.2.3.1"/>
  <changelog author="skotov@suse.com" date="1550491200">- Version 1.2.1
- Truncate the RMT lockfile when writing a new PID (bsc#1125770)
- Zypper authentication plugin (fate#326629)
- Fix nested serializers in system/activations
- Fix HTTP vhost config</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1550750400">- Version 1.2.2
- Set CURLOPT_LOW_SPEED_LIMIT to prevent downloads from getting stuck (bsc#1107806)
- Removed use-ruby-2.5-in-rails.patch, use-ruby-2.5-in-rmt-data-import.patch and
  use-ruby-2.5-in-rmt-cli.patch as they are no longer needed.</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1552305600">- Added the ability to mirror the SUMA product tree.</changelog>
  <changelog author="Hernan Schmidt &lt;hschmidt@suse.com&gt;" date="1552392000">- Version 1.2.3
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1552478400">- Version 1.2.4
- Supply log severity to journald</changelog>
  <changelog author="tmuntaner@suse.com" date="1552910400">- Version 1.2.5
- Updated rails to version 5.1.6.2 (CVE-2019-5419: bsc#1129271)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1553083200">- Version 1.2.6
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Add a script to manually test registration sharing</changelog>
  <changelog author="skotov@suse.com" date="1553169600">- Version 1.2.7
- Online migrations will automatically add additional modules
  to the client systems depending on the base product</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1554206400">- Version 1.2.8
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module</changelog>
  <changelog author="tmuntaner@suse.com" date="1555502400">- Version 2.0.0
- Breaking Change: Added headers to generated CSV files</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1556107200">- Version 2.1.0
- Updated dependency nokogiri to 1.10.3 (CVE-2019-11068: bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557144000">- Version 2.1.1
- Make SMT data import scripts faster (bsc#1134190)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557316800">- Version 2.1.2
- Make service IDs consistent across different RMT instances (bsc#1134428)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557748800">- Version 2.1.3
- Mirror additional repos that were enabled during mirroring (bsc#1132690)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557921600">- Version 2.1.4
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)</changelog>
  <changelog author="Leon Schroeder &lt;lschroeder@suse.com&gt;" date="1559822400">- Version 2.1.5
- Fix create UUID when system_uuid file empty (bsc#1138316)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1560513600">- Version 2.2.0
- Add `rmt-cli systems list` command to list registered systems</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1561550400">- Version 2.2.1
- Fix dependency to removed boot_cli_i18n file (bsc#1136020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1561982400">- Version 2.3.0
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1562328000">- Version 2.3.1
- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel</changelog>
</package>
<package pkgid="61e202ff108f7d3e555fa70486e928d9d30acdc04f971926cca3684f11dac4da" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp151.2.3.1"/>
  <changelog author="skotov@suse.com" date="1550491200">- Version 1.2.1
- Truncate the RMT lockfile when writing a new PID (bsc#1125770)
- Zypper authentication plugin (fate#326629)
- Fix nested serializers in system/activations
- Fix HTTP vhost config</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1550750400">- Version 1.2.2
- Set CURLOPT_LOW_SPEED_LIMIT to prevent downloads from getting stuck (bsc#1107806)
- Removed use-ruby-2.5-in-rails.patch, use-ruby-2.5-in-rmt-data-import.patch and
  use-ruby-2.5-in-rmt-cli.patch as they are no longer needed.</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1552305600">- Added the ability to mirror the SUMA product tree.</changelog>
  <changelog author="Hernan Schmidt &lt;hschmidt@suse.com&gt;" date="1552392000">- Version 1.2.3
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1552478400">- Version 1.2.4
- Supply log severity to journald</changelog>
  <changelog author="tmuntaner@suse.com" date="1552910400">- Version 1.2.5
- Updated rails to version 5.1.6.2 (CVE-2019-5419: bsc#1129271)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1553083200">- Version 1.2.6
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Add a script to manually test registration sharing</changelog>
  <changelog author="skotov@suse.com" date="1553169600">- Version 1.2.7
- Online migrations will automatically add additional modules
  to the client systems depending on the base product</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1554206400">- Version 1.2.8
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module</changelog>
  <changelog author="tmuntaner@suse.com" date="1555502400">- Version 2.0.0
- Breaking Change: Added headers to generated CSV files</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1556107200">- Version 2.1.0
- Updated dependency nokogiri to 1.10.3 (CVE-2019-11068: bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557144000">- Version 2.1.1
- Make SMT data import scripts faster (bsc#1134190)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557316800">- Version 2.1.2
- Make service IDs consistent across different RMT instances (bsc#1134428)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557748800">- Version 2.1.3
- Mirror additional repos that were enabled during mirroring (bsc#1132690)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1557921600">- Version 2.1.4
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)</changelog>
  <changelog author="Leon Schroeder &lt;lschroeder@suse.com&gt;" date="1559822400">- Version 2.1.5
- Fix create UUID when system_uuid file empty (bsc#1138316)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1560513600">- Version 2.2.0
- Add `rmt-cli systems list` command to list registered systems</changelog>
  <changelog author="Serhii Kotov &lt;skotov@suse.com&gt;" date="1561550400">- Version 2.2.1
- Fix dependency to removed boot_cli_i18n file (bsc#1136020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1561982400">- Version 2.3.0
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1562328000">- Version 2.3.1
- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel</changelog>
</package>
<package pkgid="247a762058e3d8634a322a09dde173c6377c90cef2b3d4d67511fc9e691d5d60" name="rpcbind" arch="i586">
  <version epoch="0" ver="0.2.3" rel="lp151.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1418904000">- Update to current git, which contains the following patches:
  - 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
  - 0003-systemd-no-dualmode.patch
  - 0004-systemd-sd_notify.patch
  - 0018-configure-check-for-nss.h.patch</changelog>
  <changelog author="kukuk@suse.de" date="1430395200">- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
  - 0005-Remove-obsolete-function-in6_fillscopeid.patch
  - 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
  - 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
  - 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
  - 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
  - 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
  - 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
  - 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
  - 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch</changelog>
  <changelog author="okir@suse.com" date="1432728000">- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
  forwarding (bnc#932423)</changelog>
  <changelog author="kukuk@suse.de" date="1436875200">- Add 099-poll.patch: use libtirpc with poll() implementation</changelog>
  <changelog author="okir@suse.com" date="1437998400">- Document how to restrict addresses that rpcbind will listen on
  [bsc#935102]
  Added 0031-rpcbind-manpage.patch</changelog>
  <changelog author="okir@suse.com" date="1442836800">- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
  remote scans [CVE-2015-7236, bsc#940191, bsc#946204]</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Add 0002-revert-auth.patch: revert old patch no longer working
  with libtirpc 1.0.1
  (http://sourceforge.net/p/libtirpc/mailman/message/34585439/)</changelog>
  <changelog author="kukuk@suse.de" date="1453896000">- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
  patches.
- Submit for SLE12SP2 [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1455278400">- Sync with current git:
  - Replace 0002-revert-auth.patch with
    0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
  - Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
    to fix problems with activation via sockets by systemd
  - Replace 0032-CVE-2015-7236.patch with
    0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
  - Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch</changelog>
  <changelog author="kukuk@suse.de" date="1455883200">- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
  interface for libtirpc, which is limited to 1024 connections.</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- pmap_set: use tirpc header files and link against libtirpc</changelog>
  <changelog author="fbui@suse.com" date="1465300800">-  Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
  systemd.pc is part of systemd main package now. Instead of
  build-requiring systemd, import systemd-rpm-macros which has the
  %{_unitdir} definition and much less dependencies than systemd and
  use it when configuring rpcbind so it won't try to find the unit dir
  by using pkg-config.
  Also replace BR libsystemd-daemon by libsystemd since the former is
  obsolete and is replaced by the later.</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
  reboot and this makes read-only root filesystem easier.</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
  from upstream, replacing systemd tmpfile solution.</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust for new system user/group RPMs</changelog>
  <changelog author="schwab@suse.de" date="1495022400">- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
  failed (bsc#1037559, CVE-2017-8779)</changelog>
  <changelog author="kukuk@suse.de" date="1502884800">- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1539345600">- fix tool stack buffer overflow (bsc#969953)
  add 0001-rpcinfo-Fix-stack-buffer-overflow.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1559563200">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
</package>
<package pkgid="314781e1e65c7ac0eb229de2d5297702d8f9ffdcd2240ecd522c361c93354027" name="rpcbind" arch="src">
  <version epoch="0" ver="0.2.3" rel="lp151.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1418904000">- Update to current git, which contains the following patches:
  - 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
  - 0003-systemd-no-dualmode.patch
  - 0004-systemd-sd_notify.patch
  - 0018-configure-check-for-nss.h.patch</changelog>
  <changelog author="kukuk@suse.de" date="1430395200">- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
  - 0005-Remove-obsolete-function-in6_fillscopeid.patch
  - 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
  - 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
  - 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
  - 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
  - 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
  - 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
  - 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
  - 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch</changelog>
  <changelog author="okir@suse.com" date="1432728000">- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
  forwarding (bnc#932423)</changelog>
  <changelog author="kukuk@suse.de" date="1436875200">- Add 099-poll.patch: use libtirpc with poll() implementation</changelog>
  <changelog author="okir@suse.com" date="1437998400">- Document how to restrict addresses that rpcbind will listen on
  [bsc#935102]
  Added 0031-rpcbind-manpage.patch</changelog>
  <changelog author="okir@suse.com" date="1442836800">- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
  remote scans [CVE-2015-7236, bsc#940191, bsc#946204]</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Add 0002-revert-auth.patch: revert old patch no longer working
  with libtirpc 1.0.1
  (http://sourceforge.net/p/libtirpc/mailman/message/34585439/)</changelog>
  <changelog author="kukuk@suse.de" date="1453896000">- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
  patches.
- Submit for SLE12SP2 [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1455278400">- Sync with current git:
  - Replace 0002-revert-auth.patch with
    0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
  - Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
    to fix problems with activation via sockets by systemd
  - Replace 0032-CVE-2015-7236.patch with
    0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
  - Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch</changelog>
  <changelog author="kukuk@suse.de" date="1455883200">- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
  interface for libtirpc, which is limited to 1024 connections.</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- pmap_set: use tirpc header files and link against libtirpc</changelog>
  <changelog author="fbui@suse.com" date="1465300800">-  Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
  systemd.pc is part of systemd main package now. Instead of
  build-requiring systemd, import systemd-rpm-macros which has the
  %{_unitdir} definition and much less dependencies than systemd and
  use it when configuring rpcbind so it won't try to find the unit dir
  by using pkg-config.
  Also replace BR libsystemd-daemon by libsystemd since the former is
  obsolete and is replaced by the later.</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
  reboot and this makes read-only root filesystem easier.</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
  from upstream, replacing systemd tmpfile solution.</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust for new system user/group RPMs</changelog>
  <changelog author="schwab@suse.de" date="1495022400">- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
  failed (bsc#1037559, CVE-2017-8779)</changelog>
  <changelog author="kukuk@suse.de" date="1502884800">- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1539345600">- fix tool stack buffer overflow (bsc#969953)
  add 0001-rpcinfo-Fix-stack-buffer-overflow.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1559563200">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
</package>
<package pkgid="d837040185f7633300976205685237d8fffd0d487c60fc877690bb2fbbdc1368" name="rpcbind" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="lp151.5.3.1"/>
  <changelog author="kukuk@suse.de" date="1418904000">- Update to current git, which contains the following patches:
  - 0002-rpcinfo_warmstart-no_warning_about_missing_file.patch
  - 0003-systemd-no-dualmode.patch
  - 0004-systemd-sd_notify.patch
  - 0018-configure-check-for-nss.h.patch</changelog>
  <changelog author="kukuk@suse.de" date="1430395200">- Update to rpcbind 0.2.3
- Following patches were accepted upstream:
  - 0005-Remove-obsolete-function-in6_fillscopeid.patch
  - 0006-In-init_transport-move-creation-of-COTS-sockets-clos.patch
  - 0007-The-use-of-AI_NUMERICHOST-in-init_transport-is-broke.patch
  - 0019-rpcinfo-ip_ping-clean-up-client-ping-create-destroy.patch
  - 0020-rpcinfo-introduce-new-helper-function-ip_getclient.patch
  - 0021-rpcinfo-make-t-u-options-support-IPv6-addresses-too.patch
  - 0022-rpcinfo-remove-obsolete-function-clnt_com_create.patch
  - 0023-Make-rpcinfo-p-support-IPv6-addresses-too.patch
  - 0024-rpcinfo-remove-obsolete-function-get_inet_address.patch</changelog>
  <changelog author="okir@suse.com" date="1432728000">- Add patch 0030-systemd-fix-rmtcall.patch to fix rmtcall
  forwarding (bnc#932423)</changelog>
  <changelog author="kukuk@suse.de" date="1436875200">- Add 099-poll.patch: use libtirpc with poll() implementation</changelog>
  <changelog author="okir@suse.com" date="1437998400">- Document how to restrict addresses that rpcbind will listen on
  [bsc#935102]
  Added 0031-rpcbind-manpage.patch</changelog>
  <changelog author="okir@suse.com" date="1442836800">- Add patch 0032-CVE-2015-7236.patch to fix a segfault on certain
  remote scans [CVE-2015-7236, bsc#940191, bsc#946204]</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Add 0002-revert-auth.patch: revert old patch no longer working
  with libtirpc 1.0.1
  (http://sourceforge.net/p/libtirpc/mailman/message/34585439/)</changelog>
  <changelog author="kukuk@suse.de" date="1453896000">- Disable 0030-systemd-fix-rmtcall.patch, needs the other disabled
  patches.
- Submit for SLE12SP2 [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1455278400">- Sync with current git:
  - Replace 0002-revert-auth.patch with
    0002-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch
  - Add 0003-Delete-the-unix-socket-only-if-we-have-created-it.patch
    to fix problems with activation via sockets by systemd
  - Replace 0032-CVE-2015-7236.patch with
    0004-Fix-memory-corruption-in-PMAP_CALLIT-code.patch
  - Add 0005-security.c-removed-warning.patch to fix compiler warnings
- Temporary remove 099-poll.patch</changelog>
  <changelog author="kukuk@suse.de" date="1455883200">- Add 0006-don-t-use-svc_fdset.patch: don't use the svc_fdset
  interface for libtirpc, which is limited to 1024 connections.</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- pmap_set: use tirpc header files and link against libtirpc</changelog>
  <changelog author="fbui@suse.com" date="1465300800">-  Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
  systemd.pc is part of systemd main package now. Instead of
  build-requiring systemd, import systemd-rpm-macros which has the
  %{_unitdir} definition and much less dependencies than systemd and
  use it when configuring rpcbind so it won't try to find the unit dir
  by using pkg-config.
  Also replace BR libsystemd-daemon by libsystemd since the former is
  obsolete and is replaced by the later.</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
  reboot and this makes read-only root filesystem easier.</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
  from upstream, replacing systemd tmpfile solution.</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust for new system user/group RPMs</changelog>
  <changelog author="schwab@suse.de" date="1495022400">- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
  failed (bsc#1037559, CVE-2017-8779)</changelog>
  <changelog author="kukuk@suse.de" date="1502884800">- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1539345600">- fix tool stack buffer overflow (bsc#969953)
  add 0001-rpcinfo-Fix-stack-buffer-overflow.patch</changelog>
  <changelog author="Thomas Blume &lt;Thomas.Blume@suse.com&gt;" date="1559563200">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
</package>
<package pkgid="97ded83d960d258740e65cfc43f1c90932b9c684d48ab0b9ae438c0df741b657" name="rsocket" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="9a27bc8ab923100fe501b5c7c2ff075c0b53bcfa48ea7fab8716f778d027b2ab" name="rsocket" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="183e3d6723e573e84161fcfbabea1c6539803a99163288acefdd444bed73eb30" name="rsocket-32bit" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="a45e584fb1adc97fc3974f5d8eb7670818661d4ddf011debd534ab6c5b34ce13" name="rsync" arch="i586">
  <version epoch="0" ver="3.1.3" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1422878400">- fix for CVE-2014-9512 (bnc#915410)
  * path spoofing attack vulnerability
  * added rsync-CVE-2014-9512.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424865600">- rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr])
  instead of AC_CHECK_LIB(attr,getxattr) so libattr is
  not injected as a dependency when glibc is enough since
  several years to use getxattr.</changelog>
  <changelog author="vcizek@suse.com" date="1439294400">- reintroduce "use slp" directive (bsc#922710)
  * added rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444132800">- add a compatibility flag to avoid checksum collisions (bsc#900914)
  * fixes rsync equivalent of librsync's CVE-2014-8242
  * added rsync-equivalent_of_CVE-2014-8242.patch
- modify rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444219200">- better disable slp by default, it doesn't seem to be used much
  and it often caused problems (eg boo#898513, bsc#922710)
  * set "use slp" in rsyncd.conf to enable
  * modified rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1452081600">- update to 3.1.2
- drop patches rsync-CVE-2014-9512.patch,
  rsync-equivalent_of_CVE-2014-8242.patch (applied upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- We no longer need to inject the pid in post as we do not use
  the iniscript relying on it
- Add socket activation service instead of the xinetd service
- Verify in services the configuration to run actually exist
- Drop sle11 support as it does not autoreconf anymore
- Drop patch system-zlib.diff that was never applied
- Switch to system popt and zlib:
  * This should not cause issues now because upstream states the
    underlying issue why we used the bundled one was fixed by
    using more safeguarded error detection</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Add patch to build with both bundled and external zlib to support
  both compression methods at once bsc#1046197:
  * rsync-both-compressions.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Refresh patch rsync-both-compressions.patch to include
  fix when using old-compress on new zlib on server too</changelog>
  <changelog author="tchvatal@suse.com" date="1500897601">- Execute tests to ensure the basics are still working</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Try more in supporting all scenarios bsc#1046197#c24
  * rsync-both-compressions.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511870400">- Security fix [bsc#1066644, CVE-2017-16548]
  * Missing trailing '\0' character check could lead to remote DoS
  * Added rsync-CVE-2017-16548.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Fix: Stop file upload after errors [bsc#1062063]
- Added patches:
  * rsync-send_error_to_sender.patch
  * rsync-avoid-uploading-after-error.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516276800">- Security fix: Ignore --protect-args when already sent by client
  [bsc#1076503, CVE-2018-5764]
  * Added patch rsync-3.1.2-CVE-2018-5764.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Update to version 3.1.3 [bsc#1076503]:
  Protocol: 31 (unchanged)
- SECURITY FIXES:
  * Fixed a buffer overrun in the protocol's handling of xattr names and
    ensure that the received name is null terminated.
  * Fix an issue with --protect-args where the user could specify the arg
    in the protected-arg list and short-circuit some of the arg-sanitizing
    code.
- BUG FIXES:
  * Don't output about a new backup dir without appropriate info verbosity.
  * Fixed some issues with the sort functions in support/rsyncstats script.
  * Added a way to specify daemon config lists (e.g. users, groups, etc)
  * that contain spaces (see "auth users" in the latest rsyncd.conf manpage).
  * If a backup fails (e.g. full disk) rsync exits with an error.
  * Fixed a problem with a doubled --fuzzy option combined with --link-dest.
  * Avoid invalid output in the summary if either the start or end time had
    an error.
  * We don't allow a popt alias to affect the --daemon or --server options.
  * Fix daemon exclude code to disallow attribute changes in addition to
    disallowing transfers.
  * Don't force nanoseconds to match if a non-transferred, non-checksummed
    file only passed the quick-check w/o comparing nanosecods.
- ENHANCEMENTS:
  * Added the ability for rsync to compare nanosecond times in its
    file-check
    comparisons, and added support nanosecond times on Mac OS X.
  * Added a short-option (-@) for --modify-window.
  * Added the --checksum-choice=NAME[,NAME] option to choose the checksum
    algorithms.
  * Added hashing of xattr names (with using -X) to improve the handling of
    files with large numbers of xattrs.
  * Added a way to filter xattr names using include/exclude/filter rules
    (see the --xattrs option in the manpage for details).
  * Added "daemon chroot|uid|gid" to the daemon config (in addition to the
    old chroot|uid|gid settings that affect the daemon's transfer process).
  * Added "syslog tag" to the daemon configuration.
  * Some manpage improvements.
- DEVELOPER RELATED:
  * Tweak the "make" output when yodl isn't around to create the man pages.
  * Changed an obsolete autoconf compile macro.
  * Support newer yodl versions when converting man pages.
- Dropped patches fixed upstream:
  * rsync-CVE-2017-16548.patch
  * rsync-3.1.2-CVE-2018-5764.patch
- Refreshed patches:
  * rsync-send_error_to_sender.patch</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1531310400">- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd [bsc#1100786].</changelog>
  <changelog author="Matwey V. Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1555156800">- Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1555329600">- Fixed bug numbers in spec file</changelog>
</package>
<package pkgid="1ee98c0a276004415f5097e8b2a49b90ecf29258783758174b57ef81088bb59b" name="rsync" arch="src">
  <version epoch="0" ver="3.1.3" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1422878400">- fix for CVE-2014-9512 (bnc#915410)
  * path spoofing attack vulnerability
  * added rsync-CVE-2014-9512.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424865600">- rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr])
  instead of AC_CHECK_LIB(attr,getxattr) so libattr is
  not injected as a dependency when glibc is enough since
  several years to use getxattr.</changelog>
  <changelog author="vcizek@suse.com" date="1439294400">- reintroduce "use slp" directive (bsc#922710)
  * added rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444132800">- add a compatibility flag to avoid checksum collisions (bsc#900914)
  * fixes rsync equivalent of librsync's CVE-2014-8242
  * added rsync-equivalent_of_CVE-2014-8242.patch
- modify rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444219200">- better disable slp by default, it doesn't seem to be used much
  and it often caused problems (eg boo#898513, bsc#922710)
  * set "use slp" in rsyncd.conf to enable
  * modified rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1452081600">- update to 3.1.2
- drop patches rsync-CVE-2014-9512.patch,
  rsync-equivalent_of_CVE-2014-8242.patch (applied upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- We no longer need to inject the pid in post as we do not use
  the iniscript relying on it
- Add socket activation service instead of the xinetd service
- Verify in services the configuration to run actually exist
- Drop sle11 support as it does not autoreconf anymore
- Drop patch system-zlib.diff that was never applied
- Switch to system popt and zlib:
  * This should not cause issues now because upstream states the
    underlying issue why we used the bundled one was fixed by
    using more safeguarded error detection</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Add patch to build with both bundled and external zlib to support
  both compression methods at once bsc#1046197:
  * rsync-both-compressions.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Refresh patch rsync-both-compressions.patch to include
  fix when using old-compress on new zlib on server too</changelog>
  <changelog author="tchvatal@suse.com" date="1500897601">- Execute tests to ensure the basics are still working</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Try more in supporting all scenarios bsc#1046197#c24
  * rsync-both-compressions.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511870400">- Security fix [bsc#1066644, CVE-2017-16548]
  * Missing trailing '\0' character check could lead to remote DoS
  * Added rsync-CVE-2017-16548.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Fix: Stop file upload after errors [bsc#1062063]
- Added patches:
  * rsync-send_error_to_sender.patch
  * rsync-avoid-uploading-after-error.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516276800">- Security fix: Ignore --protect-args when already sent by client
  [bsc#1076503, CVE-2018-5764]
  * Added patch rsync-3.1.2-CVE-2018-5764.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Update to version 3.1.3 [bsc#1076503]:
  Protocol: 31 (unchanged)
- SECURITY FIXES:
  * Fixed a buffer overrun in the protocol's handling of xattr names and
    ensure that the received name is null terminated.
  * Fix an issue with --protect-args where the user could specify the arg
    in the protected-arg list and short-circuit some of the arg-sanitizing
    code.
- BUG FIXES:
  * Don't output about a new backup dir without appropriate info verbosity.
  * Fixed some issues with the sort functions in support/rsyncstats script.
  * Added a way to specify daemon config lists (e.g. users, groups, etc)
  * that contain spaces (see "auth users" in the latest rsyncd.conf manpage).
  * If a backup fails (e.g. full disk) rsync exits with an error.
  * Fixed a problem with a doubled --fuzzy option combined with --link-dest.
  * Avoid invalid output in the summary if either the start or end time had
    an error.
  * We don't allow a popt alias to affect the --daemon or --server options.
  * Fix daemon exclude code to disallow attribute changes in addition to
    disallowing transfers.
  * Don't force nanoseconds to match if a non-transferred, non-checksummed
    file only passed the quick-check w/o comparing nanosecods.
- ENHANCEMENTS:
  * Added the ability for rsync to compare nanosecond times in its
    file-check
    comparisons, and added support nanosecond times on Mac OS X.
  * Added a short-option (-@) for --modify-window.
  * Added the --checksum-choice=NAME[,NAME] option to choose the checksum
    algorithms.
  * Added hashing of xattr names (with using -X) to improve the handling of
    files with large numbers of xattrs.
  * Added a way to filter xattr names using include/exclude/filter rules
    (see the --xattrs option in the manpage for details).
  * Added "daemon chroot|uid|gid" to the daemon config (in addition to the
    old chroot|uid|gid settings that affect the daemon's transfer process).
  * Added "syslog tag" to the daemon configuration.
  * Some manpage improvements.
- DEVELOPER RELATED:
  * Tweak the "make" output when yodl isn't around to create the man pages.
  * Changed an obsolete autoconf compile macro.
  * Support newer yodl versions when converting man pages.
- Dropped patches fixed upstream:
  * rsync-CVE-2017-16548.patch
  * rsync-3.1.2-CVE-2018-5764.patch
- Refreshed patches:
  * rsync-send_error_to_sender.patch</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1531310400">- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd [bsc#1100786].</changelog>
  <changelog author="Matwey V. Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1555156800">- Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1555329600">- Fixed bug numbers in spec file</changelog>
</package>
<package pkgid="08ec6acfab53196e56ef5fd4939a0316e5ad778d631074729bcba7bd9b634b86" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.1.3" rel="lp151.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1422878400">- fix for CVE-2014-9512 (bnc#915410)
  * path spoofing attack vulnerability
  * added rsync-CVE-2014-9512.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424865600">- rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr])
  instead of AC_CHECK_LIB(attr,getxattr) so libattr is
  not injected as a dependency when glibc is enough since
  several years to use getxattr.</changelog>
  <changelog author="vcizek@suse.com" date="1439294400">- reintroduce "use slp" directive (bsc#922710)
  * added rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444132800">- add a compatibility flag to avoid checksum collisions (bsc#900914)
  * fixes rsync equivalent of librsync's CVE-2014-8242
  * added rsync-equivalent_of_CVE-2014-8242.patch
- modify rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="vcizek@suse.com" date="1444219200">- better disable slp by default, it doesn't seem to be used much
  and it often caused problems (eg boo#898513, bsc#922710)
  * set "use slp" in rsyncd.conf to enable
  * modified rsync-add_back_use_slp_directive.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1452081600">- update to 3.1.2
- drop patches rsync-CVE-2014-9512.patch,
  rsync-equivalent_of_CVE-2014-8242.patch (applied upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- We no longer need to inject the pid in post as we do not use
  the iniscript relying on it
- Add socket activation service instead of the xinetd service
- Verify in services the configuration to run actually exist
- Drop sle11 support as it does not autoreconf anymore
- Drop patch system-zlib.diff that was never applied
- Switch to system popt and zlib:
  * This should not cause issues now because upstream states the
    underlying issue why we used the bundled one was fixed by
    using more safeguarded error detection</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Add patch to build with both bundled and external zlib to support
  both compression methods at once bsc#1046197:
  * rsync-both-compressions.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Refresh patch rsync-both-compressions.patch to include
  fix when using old-compress on new zlib on server too</changelog>
  <changelog author="tchvatal@suse.com" date="1500897601">- Execute tests to ensure the basics are still working</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Try more in supporting all scenarios bsc#1046197#c24
  * rsync-both-compressions.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511870400">- Security fix [bsc#1066644, CVE-2017-16548]
  * Missing trailing '\0' character check could lead to remote DoS
  * Added rsync-CVE-2017-16548.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Fix: Stop file upload after errors [bsc#1062063]
- Added patches:
  * rsync-send_error_to_sender.patch
  * rsync-avoid-uploading-after-error.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516276800">- Security fix: Ignore --protect-args when already sent by client
  [bsc#1076503, CVE-2018-5764]
  * Added patch rsync-3.1.2-CVE-2018-5764.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Update to version 3.1.3 [bsc#1076503]:
  Protocol: 31 (unchanged)
- SECURITY FIXES:
  * Fixed a buffer overrun in the protocol's handling of xattr names and
    ensure that the received name is null terminated.
  * Fix an issue with --protect-args where the user could specify the arg
    in the protected-arg list and short-circuit some of the arg-sanitizing
    code.
- BUG FIXES:
  * Don't output about a new backup dir without appropriate info verbosity.
  * Fixed some issues with the sort functions in support/rsyncstats script.
  * Added a way to specify daemon config lists (e.g. users, groups, etc)
  * that contain spaces (see "auth users" in the latest rsyncd.conf manpage).
  * If a backup fails (e.g. full disk) rsync exits with an error.
  * Fixed a problem with a doubled --fuzzy option combined with --link-dest.
  * Avoid invalid output in the summary if either the start or end time had
    an error.
  * We don't allow a popt alias to affect the --daemon or --server options.
  * Fix daemon exclude code to disallow attribute changes in addition to
    disallowing transfers.
  * Don't force nanoseconds to match if a non-transferred, non-checksummed
    file only passed the quick-check w/o comparing nanosecods.
- ENHANCEMENTS:
  * Added the ability for rsync to compare nanosecond times in its
    file-check
    comparisons, and added support nanosecond times on Mac OS X.
  * Added a short-option (-@) for --modify-window.
  * Added the --checksum-choice=NAME[,NAME] option to choose the checksum
    algorithms.
  * Added hashing of xattr names (with using -X) to improve the handling of
    files with large numbers of xattrs.
  * Added a way to filter xattr names using include/exclude/filter rules
    (see the --xattrs option in the manpage for details).
  * Added "daemon chroot|uid|gid" to the daemon config (in addition to the
    old chroot|uid|gid settings that affect the daemon's transfer process).
  * Added "syslog tag" to the daemon configuration.
  * Some manpage improvements.
- DEVELOPER RELATED:
  * Tweak the "make" output when yodl isn't around to create the man pages.
  * Changed an obsolete autoconf compile macro.
  * Support newer yodl versions when converting man pages.
- Dropped patches fixed upstream:
  * rsync-CVE-2017-16548.patch
  * rsync-3.1.2-CVE-2018-5764.patch
- Refreshed patches:
  * rsync-send_error_to_sender.patch</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1531310400">- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd [bsc#1100786].</changelog>
  <changelog author="Matwey V. Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1555156800">- Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1555329600">- Fixed bug numbers in spec file</changelog>
</package>
<package pkgid="d9f2b8943ae8cae8c410e6a3b7b6456e23832023e7c14aeac29d8c4e63bbf462" name="ruby-bundled-gems-rpmhelper" arch="noarch">
  <version epoch="0" ver="0.0.2" rel="lp151.2.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627200">- initial package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627201">- do not anchor on string start
- properly name the items in the attr file</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627202">- handle all gemspecs found under specification</changelog>
</package>
<package pkgid="4ba2ee59cba0e1e63f1292a49d7b37dbc8bbcbcbb4e66c4ae7ecde8bf7ed99af" name="ruby-bundled-gems-rpmhelper" arch="src">
  <version epoch="0" ver="0.0.2" rel="lp151.2.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627200">- initial package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627201">- do not anchor on string start
- properly name the items in the attr file</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549627202">- handle all gemspecs found under specification</changelog>
</package>
<package pkgid="de0438a3ba2ec4142e6642c5bf721193d531d1c462e09fd5c1e63ced33f6cf28" name="ruby2.5" arch="src">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="248d6946dbf1ebc1f48b3d8e2c0828706e429b7e791d40d9cd240ce9a21a8f2b" name="ruby2.5" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="d1a293718a103388fab3b02f2bfd3a9076550d70bab2425d0c42707352934b5c" name="ruby2.5-devel" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="41cad41c4d631b32f9173240cead943c01dab5ee2b2e74eb64fd83cbb9efcbc1" name="ruby2.5-devel-extra" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="24899e998a5e854b5b665091369f3975fad43e9b6509a51078a2271541523a0f" name="ruby2.5-doc" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="cea42e9e8977610322fe2eb37a0a1ab501af70a4a5ee3fe603568aea28410e02" name="ruby2.5-doc-ri" arch="noarch">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="9a706f00395d76f973012ecece89ef3d3957326dce331805266f873c5ff7a3fd" name="ruby2.5-stdlib" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="lp151.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1510747200">- update to 60739
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1510920000">- update to 60813
  see installed /usr/share/doc/packages/ruby2.5/ChangeLog</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- disable jemalloc again because of: (boo#1068883)
  https://github.com/jemalloc/jemalloc/issues/937</changelog>
  <changelog author="mrueckert@suse.de" date="1513598400">- update to 2.5.0~rc1
  https://www.ruby-lang.org/en/news/2017/12/14/ruby-2-5-0-rc1-released/
- added 316f58076d29dcff053256992d9ec19fed7e698f.patch
  to fix building rbtrace and ruby-prof</changelog>
  <changelog author="mrueckert@suse.de" date="1513684800">- switch to https urls</changelog>
  <changelog author="mrueckert@suse.de" date="1514203200">- update to 2.5.0 final
  Ruby 2.5.0 is the first stable release of the Ruby 2.5 series. It
  introduces many new features and performance improvements. The
  notable changes are as follows:
  - New Features
  - rescue/else/ensure are now allowed to be used directly with
    do/end blocks. [Feature #12906]
  - Add yield_self to yield given block in its context. Unlike
    tap, it returns the result of the block. [Feature #6721]
  - Support branch coverage and method coverage measurement. The
    branch coverage indicates which branches are executed and
    which are not. The method coverage indicates which methods
    are invoked and which are not. By running the test suite with
    these new features, you will know which branches and methods
    are executed, and evaluate total coverage of the test suite
    more strictly. [Feature #13901]
  - Hash#slice [Feature #8499] and Hash#transform_keys [Feature
    [#13583]]
  - Struct.new can create classes that accept keyword arguments.
    [Feature #11925]
  - Enumerable#any?,all?,none? and one? accept a pattern argument
    [Feature #11286]
  - Top-level constant look-up is no longer available. [Feature
    [#11547]]
  - One of our most loved libraries, pp.rb, is now automatically
    loaded. You no longer have to write require "pp". [Feature
    [#14123]]
  - Print backtrace and error message in reverse order (oldest
    call first, most recent call last). When a long backtrace
    appears on your terminal (TTY), you can easily find the cause
    line at the bottom of the backtrace. Note that the order is
    reversed only when backtrace is printed out to the terminal
    directly. [Feature #8661] [experimental]
  - Performance improvements
  - About 5-10% performance improvement by removing all trace
    instructions from overall bytecode (instruction sequences).
    The trace instruction was added to support the TracePoint.
    However, in most cases, TracePoint is not used and trace
    instructions are pure overhead. Instead, now we use a dynamic
    instrumentation technique. See [Feature #14104] for more
    details.
  - Block passing by a block parameter (e.g. def foo(&amp;b);
    bar(&amp;b); end) is about 3 times faster than Ruby 2.4 by ?Lazy
    Proc allocation? technique. [Feature #14045]
  - Mutex is rewritten to be smaller and faster. [Feature #13517]
  - ERB now generates code from a template which runs twice as
    fast as Ruby 2.4.
  - Improve performance of some built-in methods including
    Array#concat, Enumerable#sort_by, String#concat,
    String#index, Time#+ and more.
  - IO.copy_stream uses copy_file_range(2) to copy offload
    [Feature #13867]
  - Other notable changes since 2.4
  - SecureRandom now prefers OS-provided sources over OpenSSL.
    [Bug #9569]
  - Promote cmath, csv, date, dbm, etc, fcntl, fiddle, fileutils,
    gdbm, ipaddr, scanf, sdbm, stringio, strscan, webrick, zlib
    from standard libraries to default gems.
  - Update to Onigmo 6.1.3.
  - It adds the absence operator.
  - Note that Ruby 2.4.1 also includes this change.
  - Update to Psych 3.0.2.
  - Update to RubyGems 2.7.3.
  - Update to RDoc 6.0.1.
  - Switch the lexer from IRB based one to Ripper. This
    dramatically improves the performance of document
    generation.
  - Fix a significant amount of bugs that existed over ten
    years.
  - Add support for new Ruby syntax from the latest versions.
  - Update supported Unicode version to 10.0.0.
  - Thread.report_on_exception is now set to true by default.
    This change helps debugging of multi-threaded programs.
    [Feature #14143]
  - IO#write now receives multiple arguments [Feature #9323] For
    details see: https://github.com/ruby/ruby/blob/v2_5_0/NEWS
    https://github.com/ruby/ruby/compare/v2_4_0...v2_5_0</changelog>
  <changelog author="mrueckert@suse.de" date="1514203201">- drop 316f58076d29dcff053256992d9ec19fed7e698f.patch
- no longer bundling bundler</changelog>
  <changelog author="mrueckert@suse.de" date="1516017600">- add reproducible build patches from debian
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1516881600">- fix dump-versions.rb: it was picking up system rdoc versions on
  some source dirs</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- wrong files where installed from the macro files after adding
  dump-version.rb</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457600">- added frozen-pop3.patch:
  Net::POPMail methods modify frozen literal when using default arg
  https://redmine.ruby-lang.org/issues/14416</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535457601">- update to 2.5.1
  This release includes some bug fixes and some security fixes.
  - CVE-2017-17742: HTTP response splitting in WEBrick
    (boo#1087434)
  - CVE-2018-6914: Unintentional file and directory creation with
    directory traversal in tempfile and tmpdir (boo#1087441)
  - CVE-2018-8777: DoS by large request in WEBrick (boo#1087436)
  - CVE-2018-8778: Buffer under-read in String#unpack (boo#1087433)
  - CVE-2018-8779: Unintentional socket creation by poisoned NUL
    byte in UNIXServer and UNIXSocket (boo#1087440)
  - CVE-2018-8780: Unintentional directory traversal by poisoned
    NUL byte in Dir (boo#1087437)
  - Multiple vulnerabilities in RubyGems
    CVE-2018-1000079 (boo#1082058)
    CVE-2018-1000075 (boo#1082014)
    CVE-2018-1000078 (boo#1082011)
    CVE-2018-1000077 (boo#1082010)
    CVE-2018-1000076 (boo#1082009)
    CVE-2018-1000074 (boo#1082008)
    CVE-2018-1000073 (boo#1082007)
  https://github.com/ruby/ruby/compare/v2_5_0...v2_5_1</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1539691200">- backport 450160263aed8c446ce5b142d71f921ab4118f3a.patch:
  Include the alternative malloc header instead of malloc.h</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1542974400">- Use parallel make.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
</package>
<package pkgid="915b0488a6a8523b30c843534493d27849236cc7c5a5c6b7999a6ef0911ecd1d" name="rubygem-libguestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="bd4149e562e12e212eb209b1f5c95d2a174c3e49de11698f78bf20e451a6ed1d" name="salt" arch="src">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="a4e4ab858cd6001d6f96e7f5f655eeddbaac218ee8b63ebb9726beedde69df1d" name="salt" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="25c6d949796a6906142e39b5b852f551f5d3b195a894977b5c83b92d90bff99c" name="salt-api" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="27b5695dc11dcb2c72d5875190ae5d69f4f67368df1f2fd0055d178b9adb9f2b" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="ceb60a3db9f1d13545afb05911412fd619dd5b646d9c5e8c07e895478129122a" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="052a87095bd144413513a80b3b4eb0e792fd9aba22507e767f1e904d68ad085e" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="d7bb6d1a2fd7b74fbcbb8f9ffc5c612516235995599fbb488c594ac0f0db57d7" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="f26a80a018398fd1a3f4f560c12292dd5785eee46867f3f95217212d9b307e3d" name="salt-master" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="765ca91ad9a4a48b9e4bfe1b33917a109df78aef5eea48f2a09c97b9f1d2fe68" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="01df463e144df33699ab3a560b9974aeb993cd70225f9da40edecc3be00244a9" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="f59bf3c848c6891ebd0f2ca98487545dc894f715b9735f19d2c3cfb229d4cb8d" name="salt-shaptools" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.2.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First package version</changelog>
  <changelog author="xarbulu@suse.com" date="1547208000">- Create crmsh core functionalities salt module and states code</changelog>
  <changelog author="xarbulu@suse.com" date="1547726400">- Create crmsh cluster_configure new state</changelog>
  <changelog author="xarbulu@suse.com" date="1549454400">- Update the way crm installation is checked</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Improve test case to check the last modification
- Format instance number properly to have 2 digits in configuration file creation</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.
- Removed salt warnings because of non usage of 'name' parameter as
  the first parameter of the state.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556020800">- Update system replication states constants usage</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Renamed the package from salt-saphana to salt-shaptools
  * This package is intended to host SAP Applications and SLE-HA
    salt modules and states, so a more meaningful name is needed.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556280000">- Add ha-cluster-init and ha-cluster-join usage when crmsh version
  is older than 3.0.0
- Add methods to customize sbd and corosync configuration files</changelog>
  <changelog author="Nick Wang &lt;nwang@suse.com&gt;" date="1557230400">- Add salt module and state to manage DRDB resources</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update secondary registration methods to use the new parameters</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559649600">- Create package version 0.2.0 after adding drbd module</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions
  (jsc#SLE-4031, jsc#SLE-4143, boo#1137989)</changelog>
</package>
<package pkgid="cb8ffb24370f4058e2f33b5b7e772b24d3cd5febb381d408d3140fb50637d1d6" name="salt-shaptools" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.2.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First package version</changelog>
  <changelog author="xarbulu@suse.com" date="1547208000">- Create crmsh core functionalities salt module and states code</changelog>
  <changelog author="xarbulu@suse.com" date="1547726400">- Create crmsh cluster_configure new state</changelog>
  <changelog author="xarbulu@suse.com" date="1549454400">- Update the way crm installation is checked</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Improve test case to check the last modification
- Format instance number properly to have 2 digits in configuration file creation</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.
- Removed salt warnings because of non usage of 'name' parameter as
  the first parameter of the state.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556020800">- Update system replication states constants usage</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Renamed the package from salt-saphana to salt-shaptools
  * This package is intended to host SAP Applications and SLE-HA
    salt modules and states, so a more meaningful name is needed.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1556280000">- Add ha-cluster-init and ha-cluster-join usage when crmsh version
  is older than 3.0.0
- Add methods to customize sbd and corosync configuration files</changelog>
  <changelog author="Nick Wang &lt;nwang@suse.com&gt;" date="1557230400">- Add salt module and state to manage DRDB resources</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update secondary registration methods to use the new parameters</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559649600">- Create package version 0.2.0 after adding drbd module</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions
  (jsc#SLE-4031, jsc#SLE-4143, boo#1137989)</changelog>
</package>
<package pkgid="6a310aa8e9b42bbccf6d86f52ea0597b99b139c7d74d7efffed8ee9e2d73576b" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="63fba5696f225baa5ccee78209241211c8cdba3bdb6b34892b06025ba743acbc" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="486c8fd18cc84d9503e473d7526a790fd9c0fc47194117de74e2763183f5ade7" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="2019.2.0" rel="lp151.5.3.1"/>
  <changelog author="bo@suse.de" date="1542369600">- Add compatibility with other package modules for "list_repos"
  function
- Added:
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch</changelog>
  <changelog author="bo@suse.de" date="1542715200">- Debian info_installed compatibility (U#50453)
- Added:
  * debian-info_installed-compatibility-50453.patch</changelog>
  <changelog author="bo@suse.de" date="1543579200">- Handle anycast IPv6 addresses on network.routes (bsc#1114474)
- Added:
  * handle-anycast-ipv6-addresses.patch</changelog>
  <changelog author="bo@suse.de" date="1543579201">- Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto
- Added:
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1543924800">- Fix latin1 encoding problems on file module (bsc#1116837)
- Added:
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1545134400">- Strip architecture from debian package names
- Added:
  * strip-architecture-from-package-name-in-aptpkg-modul.patch</changelog>
  <changelog author="bo@suse.de" date="1546516800">- Add hold/unhold functions. Fix Debian repo "signed-by".
- Added:
  * decide-if-the-source-should-be-actually-skipped.patch
  * add-hold-unhold-functions.patch</changelog>
  <changelog author="bo@suse.de" date="1546516801">- Fix FIPS enabled RES clients (bsc#1099887)
- Added:
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch</changelog>
  <changelog author="bo@suse.de" date="1546603200">- Add supportconfig module and states for minions and SaltSSH
- Added:
  * add-supportconfig-module-for-remote-calls-and-saltss.patch</changelog>
  <changelog author="bo@suse.de" date="1547121600">- Fix module 'azure.storage' has no attribute '__version__'
  (bsc#1121091)
- Added:
  * azurefs-gracefully-handle-attributeerror.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1547121601">- Fix powerpc null server_id_arch (bsc#1117995)
- Added:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1548676800">- Switch to better correct version nomenclature
- Add "id_" and "force" to the whitelist of API check
- Add metadata to accepted keyword arguments (bsc#1122680)
- Add root parameter to Zypper module
- Fix integration tests in state compiler (U#2068)
- Update Salt to 2019.2.0rc1
  See: https://docs.saltstack.com/en/develop/topics/releases/fluorine.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.2.html
  See: https://docs.saltstack.com/en/latest/topics/releases/2018.3.1.html
  for full changelog
- Added:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch
  * fix-issue-2068-test.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * zypper-add-root-configuration-parameter.patch
- Modified:
  * x509-fixes-for-remote-signing-106.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * fall-back-to-pymysql.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * add-hold-unhold-functions.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * azurefs-gracefully-handle-attributeerror.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * fix-for-suse-expanded-support-detection.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * debian-info_installed-compatibility-50453.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * x509-fixes-111.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * feat-add-grain-for-all-fqdns.patch
  * update-error-list-for-zypper.patch
  * fix-deprecation-warning-bsc-1095507.patch
  * get-os_family-for-rpm-distros-from-the-rpm-macros.-u.patch
  * fix-mine.get-not-returning-data-workaround-for-48020.patch
  * improved-handling-of-ldap-group-id.patch
  * add-engine-relaying-libvirt-events.patch
  * change-stringio-import-in-python2-to-import-the-clas.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fix-unboundlocalerror-in-file.get_diff.patch
  * fix-async-call-to-process-manager.patch
  * prevent-zypper-from-parsing-repo-configuration-from-.patch
  * decode-file-contents-for-python2-bsc-1102013.patch
  * fix-index-error-when-running-on-python-3.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
  * fix-latin1-encoding-problems-on-file-module-bsc-1116.patch
  * remove-old-hack-when-reporting-multiversion-packages.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch
  * retire-md5-checksum-for-pkg-mgmt-plugins.patch
  * add-support-for-python-3.7.patch
  * fix-for-ec2-rate-limit-failures.patch
  * support-use-of-gce-instance-credentials-109.patch
  * avoid-incomprehensive-message-if-crashes.patch
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch
  * don-t-error-on-retcode-0-in-libcrypto.openssl_init_c.patch
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch
  * fixed-usage-of-ipaddress.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch
  * prepend-current-directory-when-path-is-just-filename.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * fixing-issue-when-a-valid-token-is-generated-even-wh.patch
  * switching-looseversion-import-to-salt.utils.versions.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * python-3.7-support.patch
  * fix-cp.push-empty-file.patch
  * move-log_file-option-to-changeable-defaults.patch
  * fix-crontab-module-file-attributes-option-missing-bs.patch
  * clean-up-bad-public-key-headers.patch
  * fix-wrong-recurse-behavior-on-for-linux_acl.present-.patch
  * yamlloader-properly-handle-colons-in-inline-dicts.patch
  * no-longer-passes-missing-in-list-compound-engine-bsc.patch
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * initialize-__context__-retcode-for-functions-handled.patch
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch
  * fix-46492-file.blockreplace-throws-indexerror.patch
  * add-api-log-rotation-on-suse-package.patch
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * fix-openscap-push.patch
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1550145600">- Adds missing version update to %setup
- Update to 2019.2.0~rc2
- Add virt.all_capabilities to return all host and domain capabilities at once
- Don't call zypper with more than one --no-refresh (PR#51382)
- Added:
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * add-virt.all_capabilities.patch
- Modified:
  * bugfix-any-unicode-string-of-length-16-will-raise-ty.patch
- Removed:
  * ensure-metadata-is-an-accepted-keyword-argument-for-.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1551787200">- Removing patch to add root paramet to zypper module
- Fix for -t parameter in mount module
- No longer limiting Python3 version to &lt;3.7
- Async batch implementation
- Include aliases in FQDNS grain (bsc#1121439)
- Add virt.volume_infos and virt.volume_delete functions
- Bugfix: properly refresh pillars (bsc#1125015)
- Removes version from python3 requirement completely
- Update to 2019.2 release
  See: https://docs.saltstack.com/en/latest/topics/releases/2019.2.0.html
  for full changelog
- Added:
  * include-aliases-in-the-fqdns-grains.patch
  * mount-fix-extra-t-parameter.patch
  * add-virt.volume_infos-and-virt.volume_delete.patch
  * async-batch-implementation.patch
- Modified:
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * add-hold-unhold-functions.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * debian-info_installed-compatibility-50453.patch
  * fix-ipv6-scope-bsc-1108557.patch
- Removed:
  * x509-fixes-for-remote-signing-106.patch
  * zypper-add-root-configuration-parameter.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1556193600">- Update to 2019.2.0 complete (FATE#327138, bsc#1133523)
- Fix batch/batch-async related issues
- Calculate FQDNs in parallel to avoid blockings (bsc#1129079)
- Incorporate virt.volume_info fixes (PR#131)
- Added:
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * fix-async-batch-race-conditions.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
- Modified:
  * add-virt.volume_infos-and-virt.volume_delete.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1556625600">- Use ThreadPool from multiprocessing.pool to avoid leakings
  when calculating FQDNs
- Do not report patches as installed on RHEL systems when not all
  the related packages are installed (bsc#1128061)
- Added:
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * do-not-report-patches-as-installed-when-not-all-the-.patch</changelog>
  <changelog author="mdinca &lt;mdinca@suse.de&gt;" date="1556798400">- Fix issue preventing syndic to start
- Update year on spec copyright notice
- Added:
  * fix-syndic-start-issue.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1557230400">- Do not make Salt CLI to crash when there are IPv6 established
  connections (bsc#1130784)
- Added:
  * do-not-crash-when-there-are-ipv6-established-connect.patch</changelog>
  <changelog author="mdinca@suse.de" date="1558008000">- Fix async-batch to fire a single done event
- Added:
  * fix-async-batch-multiple-done-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1558353600">- Switch firewalld state to use change_interface (bsc#1132076)
- Added:
  * switch-firewalld-state-to-use-change_interface.patch</changelog>
</package>
<package pkgid="d1ab854421cc7b54e109b1bd2ea0ca5927dfc4c1ec991fb118952f6484e8b5e3" name="samba" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="89c920849b7b0be9bcb1171e35a51e83746ee9ac6d8c8814e47a51131f9b3d06" name="samba" arch="src">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="fe2ed7dca3eb37693839d993fa2af804ca9490c29f7fa2af4a6cb86feb1dd764" name="samba" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7d97d584634aebf2feaaf946034d16d4710638522b383cdd823c327d912905fa" name="samba-ad-dc-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="d2616dfdde3f7515fa2e6248a19b2d8f1733be2c09e8787c60c48ccf7442cb19" name="samba-ad-dc" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="52e48d19e96952c4181f3d7b8cee1b712dc9d66f2064fbb3deb39221f18a8664" name="samba-ad-dc" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="19e5085cc49b688468131281a41da2d4927fce14e944061b592862871b385197" name="samba-ceph" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="87efec73365a07b0a142b72e38c4b9ef69954addef86b3f961c86b62ce51b81f" name="samba-client-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f7dfbea051073a4de3e928a99b21a6d78cfd149bc0ba55750aeaeefdd55643a1" name="samba-client" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0e5f7fdfbd5359c3a3c4919ae63a227a45907f03a685205ce1e7fa700f55bf9c" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c5954bef1ae2e0c61c80da34fb454d8bb4015a112e8f87a1b8d8fc1dc6cffd2c" name="samba-core-devel" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4bd7d0bf960efe88e8d2b219c50b81d30567176e267a61903a48a4d273644c3e" name="samba-core-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6b5e1f0844fc37eddc78cd8ab5d4b96fe3f3cce7ed5576bf7567691923f4e1e2" name="samba-doc" arch="noarch">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="7cbe70b53ba050dbfcc6cfa2740353c97372c9c928805b82600a14c2a1d421d2" name="samba-dsdb-modules" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="c9e8dca14da745923cac9208eeede70ada1c7272505dec11902b6e6637abb087" name="samba-dsdb-modules" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0cc940f1b366b3fee8cd94eb71582d453e7cb0c898ba1b9511e0d8849cf0c10c" name="samba-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="9a6cd3b2d9ba241b72a69ddc824506d358f337756dcba06e23359ec88e4e9d36" name="samba-libs" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="4cb8df5884b8e589ab36833e722a57a899f4411ace420e1bd89e47ffb8d99050" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="96278a0ad712932961c9e3cf313dfb7f116a3098ccc73967bfd1ea709f6d94d0" name="samba-libs-python-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="17a2c4e888a355c73833568a5330edf2f538a844c17d46f96438efd5602f93dd" name="samba-libs-python" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="130ab3176d20200a9b99c529ceee58b920c2ad881779387bd7fb40f0b279e939" name="samba-libs-python" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="a990f60cfa3b4b4fa9484f9c143e4a47f6a49c18adb7188e9827d05e1830d481" name="samba-libs-python3-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="1eff7295332d07a9a728c150dfc3d530f44cfdd7936615357b65848fdb7adb92" name="samba-libs-python3" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="95018f64b4d431ea4b9f4fc2f83b7da6bbde1ababac8dce43b0dfad861d5be3e" name="samba-libs-python3" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="72a90bec4462cf34cf4176367d6639e65ed3afa49bd0a9a9fafb0889f199f5fb" name="samba-pidl" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="0d295416e3f3b54b6e1198fe958700f178e3e5b8a6a1c51f4cea19f2492fe69a" name="samba-pidl" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f401c7b0acb83383ac1a6ae483e4f629cd1d54b12ed135daf7d2c4a507d49635" name="samba-python" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="b9169d2d5b926afcbcded576f945d12226bac6fe2b575a0bf04e9d0fb920ad67" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="f14cc9e58fdd4e5cc981f39c643ad98aeb4faf4a43a7952e4fb6411d6eb44651" name="samba-python3" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6f70dd016fcc523f422690d185f9c609b279eb3e2cfea73b5fd721c4164a0054" name="samba-python3" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="08e9d57f4604ad485899d2c062225576335c1c7cd526ad7be7cfa741008ab651" name="samba-test" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="ea7a5c4d1bd23596e421ee21607c9c692b584a1ef6a00525968e18e31df87353" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="6f58c1d9bce7df9406a983e4c61fdaabbee25e4beeef51f0900491139cf6aaba" name="samba-winbind-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="2d441038f1e616570ab5b90ddfc6b4cf3b3abe1625725fec2bd571a7291a2b93" name="samba-winbind" arch="i586">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="1028f640099279e67f8e998df974f86597e715fe44d8a86dde45d0b86aaa9d01" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.176.375e1f05788" rel="lp151.2.3.1"/>
  <changelog author="dmulder@suse.com" date="1540296000">- winbind requires latest version of libtevent-util0 to start</changelog>
  <changelog author="dmulder@suse.com" date="1540814400">- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1541678400">- Update to samba-4.9.2
  + dsdb: Add comments explaining the limitations of our current backlink
    behaviour; (bso#13418);
  + Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
  + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
    (bso#13465);
  + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
  + File saving issues with vfs_fruit on samba &gt;= 4.8.5; (bso#13646);
  + Enabling vfs_fruit looses FinderInfo; (bso#13649);
  + Cancelling of SMB2 aio reads and writes returns wrong error
    NT_STATUS_INTERNAL_ERROR; (bso#13667);
  + Fix CTDB recovery record resurrection from inactive nodes and simplify
    vacuuming; (bso#13641);
  + examples: Fix the smb2mount build; (bso#13465);
  + libtevent: Fix build due to missing open_memstream on Illiumos;
    (bso#13629);
  + winbindd_cache: Fix timeout calculation for sid&lt;-&gt;name cache; (bso#13662);
  + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
    (bso#13653);
  + Extended DN SID component missing for member after switching group
    membership; (bso#13418);
  + Return STATUS_SESSION_EXPIRED error encrypted, if the request was
    encrypted; (bso#13624);
  + python: Allow forced signing via smb.SMB(); (bso#13621);
  + lib:socket: If returning early, set ifaces; (bso#13665);
  + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
    encoded unicode; (bso#13616);
  + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
    (bso#13673);
  + waf: Add -fstack-clash-protection; (bso#13601);
  + winbind: Fix segfault if an invalid passdb backend is configured;
    (bso#13668);
  + Fix bugs in CTDB event handling; (bso#13659);
  + Misbehaving nodes are sometimes not banned; (bso#13670);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- Update to samba-4.9.3
  + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
    Internal DNS server; (bso#13600); (bsc#1116319);
  + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
    (bsc#1116320);
  + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
    (bso#13674); (bsc#1116322);
  + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
    (bso#13669); (bsc#1116321);
  + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
    configuration (unsupported); (bso#13678); (bsc#1116324);
  + CVE-2018-16857: Bad password count in AD DC not always effective;
    window; (bso#13683); (bsc#1116323);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1543406400">- Update update-apparmor-samba-profile script to ignore the shares's
  paths containing substitution variables in any place, not only at the
  beginning of the path.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1543492800">- Remove python2 build dependency from samba-libs; (bsc#1116900);</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="nopower@suse.com" date="1546948800">- Update to samba-4.9.4
  + libcli/smb: Don't overwrite status code; (bso#9175).
  + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
  + Session setup reauth fails to sign response; (bso#13661).
  + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
  + vfs_shadow_copy2: Nicely deal with attempts to open previous
    version for writing; (bso#13688).
  + Restoring previous version of stream with vfs_shadow_copy2 fails
    with NT_STATUS_OBJECT_NAME_INVALID fsp-&gt;base_fsp-&gt;fsp_name; (bso#13455).
  + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
  + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
  + PEP8: fix E231: missing whitespace after ','.
  + winbindd: Fix crash when taking profiles;(bso#13629)
  + CVE-2018-14629 dns: Fix CNAME loop prevention using counter
    regression; (bso#13600)
  + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
  + CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
  + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
  + ctdb-daemon: Exit with error if a database directory does not
    exist; (bso#13696).
  + s3:libads: Add net ads leave keep-account option; (bso#13498).</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549540801">- LoadParm().load_default() fails with "Unable to load default file";
  (bsc#1089758);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1551700800">- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to samba-4.9.5
  + audit_logging: Remove debug log header and JSON Authentication:
    prefix; (bso#13714);
  + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
  + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
    CID: 1433607; (bso#11495);
  + smbd: uid: Don't crash if 'force group' is added to an existing
    share connection; (bso#13690);
  + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
    code; (bso#13770);
  + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
  + s3:utils/smbget fix recursive download with empty source
    directories; (bso#13199);
  + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
  + s3:libsmb: cli_smb2_list() can sometimes fail initially on a
    connection; (bso#13736);
  + join: Throw CommandError instead of Exception for simple errors; (bso#13747);
  + ldb: Avoid inefficient one-level searches; (bso#13762);
  + s3: libsmb: use smb2cli_conn_max_trans_size() in
    cli_smb2_list(); (bso#13736);
  + tldap: Avoid use after free errors; (bso#13776);
  + Fix idmap xid2sid cache churn; (bso#13802);
  + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
  + s3-smbd: Avoid assuming fsp is always intact after close_file
    call; (bso#13720);
  + s3-vfs-fruit: Add close call; (bso#13725);
  + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
  + s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
  + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
  + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
    ftruncate and fallocate; (bso#13807);
  + lib/audit_logging: Actually create talloc; (bso#13737);
  + netcmd/user: python[3]-gpgme unsupported and replaced by
    python[3]-gpg; (bso#13728);
  + dns: Changing onelevel search for wildcard to subtree; (bso#13738);
  + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
  + sambaundoguididx: Use the right escaped oder unescaped sam ldb
    files; (bso#13759);
  + ctdb: Print locks latency in machinereadable stats; (bso#13742);
  + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
  + audit_logging: auth_json_audit required auth_json; (bso#13715);
  + man pages: Document prefork process model; (bso#13765);
  + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
  + s3:auth: ignore create_builtin_guests() failing without a valid
    idmap configuration; (bso#13697);
  + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
    without trusts; (bso#13722);
  + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
    is not available; (bso#13723);
  + s4:server: Add support for 'smbcontrol samba shutdown' and
    'smbcontrol &lt;pid&gt; debug/debuglevel'; (bso#13752);
  + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
  + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
  + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
  + notifyd: Fix SIGBUS on sparc; (bso#13704);
  + waf: Check for libnscd; (bso#13787);
  + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
  + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
  + Recovery lock bug fixes; (bso#13800);
  + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
  + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
  + vfs_fileid: Fix get_connectpath_ino; (bso#13741);
  + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688001">- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
  (bso#13834); (bsc#1130703);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1555243200">- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1555502400">- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1557835200">- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1560427200">- CVE-2019-12435: zone operations can crash rpc server;
  (bso#13922); (bsc#1137815).</changelog>
</package>
<package pkgid="db9e81f5acd45255cfe8895c13ef1891f17ea99cd61fa844fa77ff6e81a18c6c" name="saphanabootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First version of the SAP HANA deployment formula</changelog>
  <changelog author="xarbulu@suse.com" date="1550664000">- Add templates folder with RA configuration templates</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Forces lower case SID when composing the OS username
- Typos fixing.
- Adjust the labels to SAP terminology and include help texts.</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552046400">- Improve shaptools installation python version management</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552392000">- Fix OS release comparison to use integer type in order to choose
  installable python version</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552910400">- Update primary available checking to execute this action before
  trying to copy the SSFS files from primary node
- Add configurable timeout to wait to the primary node</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update formula to work with the latest shaptools code. In this version
  the secondary node registration is managed completely in shaptools</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1558440000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the saphanabootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559822400">- Fix how qas instance number is created in scale_up_resources template</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4143)</changelog>
</package>
<package pkgid="e173c0bc4ed9f9e4083ca6f08ec3d61be5dd90dc83d3a55bfe97a6d1e4d4e1af" name="saphanabootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp151.4.1"/>
  <changelog author="xarbulu@suse.com" date="1545307200">- First version of the SAP HANA deployment formula</changelog>
  <changelog author="xarbulu@suse.com" date="1550664000">- Add templates folder with RA configuration templates</changelog>
  <changelog author="dakechi@suse.com" date="1551096000">- Forces lower case SID when composing the OS username
- Typos fixing.
- Adjust the labels to SAP terminology and include help texts.</changelog>
  <changelog author="xarbulu@suse.com" date="1551700800">- Improved the use of keystore access. When the key_name is informed,
  the user_name/user_password is not needed.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552046400">- Improve shaptools installation python version management</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552392000">- Fix OS release comparison to use integer type in order to choose
  installable python version</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1552910400">- Update primary available checking to execute this action before
  trying to copy the SSFS files from primary node
- Add configurable timeout to wait to the primary node</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Update formula to work with the latest shaptools code. In this version
  the secondary node registration is managed completely in shaptools</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1558440000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the saphanabootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1559822400">- Fix how qas instance number is created in scale_up_resources template</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4143)</changelog>
</package>
<package pkgid="824ca8aaccc9dc52e15b58326deedb0759dc43a3bb73bd906ce1f223d89b6709" name="sensord" arch="i586">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="f476790ddc19e2e112f1869a62d266bb6816d1265cd19c8285b2f56f9437f00c" name="sensord" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="0095936c1157c0213195325ba5fa0322189ee38f6d18ae693f9f98fc8da0dbc4" name="sensors" arch="i586">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="285fdd21fda5a7d6b35753763bb377619f44877b680d01d2b5a31357ec7cd47e" name="sensors" arch="src">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="coolo@suse.com" date="1372680000">- sensors is required for pacemaker and libdlm, and as such
  we should not buildrequire systemd</changelog>
  <changelog author="p.drouand@gmail.com" date="1382529600">- Remove sysvinit support; none of target distributions use it anymore</changelog>
  <changelog author="jdelvare@suse.de" date="1390392000">- Update to lm_sensors 3.3.5
  * library: Support up to 33 sensors of the same type per
    monitoring chip (needed for recent Intel processors, coretemp
    driver)
  * sensors-detect: Detection of new devices
    Added non-interactive (automatic) mode
  * lm_sensors-r6181-fix-service-files.patch: Removed, upstream
    now.
  * lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.de" date="1390392001">- Package new file /usr/share/man/man8/sensors-conf-convert.8.gz.</changelog>
  <changelog author="jdelvare@suse.de" date="1390910400">- Package COPYING and COPYING.LGPL.</changelog>
  <changelog author="jdelvare@suse.com" date="1404302400">- Add pre/post hooks for sensord service.
- Add sysconfig template for sensord service (bnc#882719).</changelog>
  <changelog author="jdelvare@suse.com" date="1404388800">- Actually create the sensord service configuration file from the
  template (bnc#882719).</changelog>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="4422d425e68f2d4f8f94b6b98280d1257b4d55cf7a2bc8be7b5a06d47e20de75" name="sensors" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp151.4.3.1"/>
  <changelog author="jdelvare@suse.com" date="1415188800">- lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch:
  fancontrol: Deal with moving hwmon attributes.
- lm_sensors-r6237-default-config-NCT6779-NCT6791.patch:
  sensors.conf.default: Add support for NCT6779 and NCT6791.
- lm_sensors-r6254-detect-print-kernel-cpu.patch: Print kernel
  version and processor information.
- lm_sensors-r6255-fix-shell-error-FCFANS.patch: fancontrol: Fix
  shell error when FCFANS is not set (bnc#903520).</changelog>
  <changelog author="jdelvare@suse.com" date="1433851200">- lm_sensors-r6282-detect-graphics-card-in-all-cases.patch:
  sensors-detect: Detect graphics card in all cases (bsc#933072).
- lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
  sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels
  (bsc#933072).</changelog>
  <changelog author="jdelvare@suse.com" date="1435665600">- Update to lm_sensors 3.4.0
  * library: The arbitrary limit on per-type sensor count is gone.
    Support for temperature min and critical min hysteresis.
  * sensors: Support for temperature min and critical min
    hysteresis.
  * fancontrol: Deal with moving hwmon attributes. Reduce memory
    consumption.
  * sensors-detect: Detection of new devices.
  * lm_sensors-r6216-fancontrol-moving-hwmon-attributes.patch,
    lm_sensors-r6237-default-config-NCT6779-NCT6791.patch,
    lm_sensors-r6254-detect-print-kernel-cpu.patch,
    lm_sensors-r6255-fix-shell-error-FCFANS.patch,
    lm_sensors-r6282-detect-graphics-card-in-all-cases.patch,
    lm_sensors-r6283-skip-addresses-0x37-0x4f-on-DDC.patch:
    Removed, upstream now.
  * lm_sensors-3.0.0-sensord-separate.patch,
    lm_sensors-3.0.0-sysconfig_metadata.patch,
    lm_sensors-3.0.3-hint-at-kernel-extra-package.patch: Refreshed.</changelog>
  <changelog author="jdelvare@suse.com" date="1435838400">- lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch: Handle
  the move of systemd from / to /usr.</changelog>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
</package>
<package pkgid="924262ec12a6d5a8a00c8058b0a93eb4b07686eddc2e5a0560b7cdddbee1e332" name="spec-cleaner" arch="noarch">
  <version epoch="0" ver="1.1.4" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 1.1.2 bsc#1099674:
  * Fixed qmake macro recommendation
  * More licenses recognised
  * Do not curlify sysuser_create</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Update to 1.1.3 bsc#1099674:
  * Convert pytest calls to macros
  * Fix errors in %python_expand line expansions
  * update licenses list
  * Expand more excludes for curlification
  * Do not add accidental newlines to complex conditions</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563364800">- Update to 1.1.4 bsc#1099674:
  * Exclude stuff from openstack macros
  * Replace 'http' with 'https' in URL
  * Replace legacy packageand() with 'and' expression
  * Replace pwdutils with shadow in Requires
  * Add openstack_cleanup_prep to bracketing excludes
  * Do not curlify yast_metainfo and yast_check
  * Fixup the eating of Source lines with whitespace
  * Document '#nospeccleaner' tag
  * Add docstrings to the functions and classes.
  * Use type hints for the most important functions
  * Update README and licences
  * Various small fixes
- add a temporary patch spec-cleaner-1.1.4_test_https.patch
  that fixes a test that fails if there is no internet connection</changelog>
</package>
<package pkgid="b32fa166ff52faa7ee75ec82335b1722e1bb99a875c97be92cb18f6ce617259a" name="spec-cleaner" arch="src">
  <version epoch="0" ver="1.1.4" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 1.1.2 bsc#1099674:
  * Fixed qmake macro recommendation
  * More licenses recognised
  * Do not curlify sysuser_create</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Update to 1.1.3 bsc#1099674:
  * Convert pytest calls to macros
  * Fix errors in %python_expand line expansions
  * update licenses list
  * Expand more excludes for curlification
  * Do not add accidental newlines to complex conditions</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563364800">- Update to 1.1.4 bsc#1099674:
  * Exclude stuff from openstack macros
  * Replace 'http' with 'https' in URL
  * Replace legacy packageand() with 'and' expression
  * Replace pwdutils with shadow in Requires
  * Add openstack_cleanup_prep to bracketing excludes
  * Do not curlify yast_metainfo and yast_check
  * Fixup the eating of Source lines with whitespace
  * Document '#nospeccleaner' tag
  * Add docstrings to the functions and classes.
  * Use type hints for the most important functions
  * Update README and licences
  * Various small fixes
- add a temporary patch spec-cleaner-1.1.4_test_https.patch
  that fixes a test that fails if there is no internet connection</changelog>
</package>
<package pkgid="a16d2fc920ef425ab065020679bef50c95527c2b0d772d58b3bbd6ad655dd144" name="spec-cleaner-format_spec_file" arch="noarch">
  <version epoch="0" ver="1.1.4" rel="lp151.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 1.1.2 bsc#1099674:
  * Fixed qmake macro recommendation
  * More licenses recognised
  * Do not curlify sysuser_create</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551960000">- Update to 1.1.3 bsc#1099674:
  * Convert pytest calls to macros
  * Fix errors in %python_expand line expansions
  * update licenses list
  * Expand more excludes for curlification
  * Do not add accidental newlines to complex conditions</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563364800">- Update to 1.1.4 bsc#1099674:
  * Exclude stuff from openstack macros
  * Replace 'http' with 'https' in URL
  * Replace legacy packageand() with 'and' expression
  * Replace pwdutils with shadow in Requires
  * Add openstack_cleanup_prep to bracketing excludes
  * Do not curlify yast_metainfo and yast_check
  * Fixup the eating of Source lines with whitespace
  * Document '#nospeccleaner' tag
  * Add docstrings to the functions and classes.
  * Use type hints for the most important functions
  * Update README and licences
  * Various small fixes
- add a temporary patch spec-cleaner-1.1.4_test_https.patch
  that fixes a test that fails if there is no internet connection</changelog>
</package>
<package pkgid="4bf860216d39a46f50c594a10c5c7f1d0db6b5021babb1eb9a4f407545e9feef" name="spectacle" arch="src">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patch to fix taking screenshots on wayland without the wayland
  platform plugin:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch
- Update description: it's "by KDE", not "for KDE"</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Fix memory leaks</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Rework rectangle/arrow key handling to avoid "stuck edges" and 0x0px rectangle
  * Add license header to TextLabel.qml
  * Fix rendering of on-screen help texts for fractional scaling</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix missing notification title found by -Wswitch-enum</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add spectacle-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="87f603e0469307ab43ceee70cb8fc52d500d4240f5fb8dd18ea169d60d01bc64" name="spectacle" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patch to fix taking screenshots on wayland without the wayland
  platform plugin:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch
- Update description: it's "by KDE", not "for KDE"</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Fix memory leaks</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Rework rectangle/arrow key handling to avoid "stuck edges" and 0x0px rectangle
  * Add license header to TextLabel.qml
  * Fix rendering of on-screen help texts for fractional scaling</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix missing notification title found by -Wswitch-enum</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add spectacle-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="92c1dfbb0bfb711b0ab9921c2478e500a04fd87b4822f1787ffe149f5ba88fde" name="spectacle-doc" arch="x86_64">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patch to fix taking screenshots on wayland without the wayland
  platform plugin:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch
- Update description: it's "by KDE", not "for KDE"</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Fix memory leaks</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Rework rectangle/arrow key handling to avoid "stuck edges" and 0x0px rectangle
  * Add license header to TextLabel.qml
  * Fix rendering of on-screen help texts for fractional scaling</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix missing notification title found by -Wswitch-enum</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add spectacle-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="83c67d59f283d9a84dc4755845862ce6597c19728df9a5724937733ecb87315f" name="spectacle-lang" arch="noarch">
  <version epoch="0" ver="18.12.3" rel="lp151.2.4.1"/>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patch to fix taking screenshots on wayland without the wayland
  platform plugin:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523016000">- Update to 18.03.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04-rc.php
- Changes since 17.12.3:
  * Too many changes to list here
- Dropped patches, now upstream:
  * 0001-Decide-to-use-the-wayland-backend-by-looking-at-XDG_.patch
- Update description: it's "by KDE", not "for KDE"</changelog>
  <changelog author="lbeltrame@kde.org" date="1524052800">- Update to 18.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.0.php
- Changes since 18.03.90:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1526040000">- Update to 18.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.1.php
- Changes since 18.04.0:
  * Fix memory leaks</changelog>
  <changelog author="lbeltrame@kde.org" date="1528459200">- Update to 18.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.2.php
- Changes since 18.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1531483200">- Update to 18.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.04.3.php
- Changes since 18.04.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532606400">- Update to 18.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08-beta.php
- Changes since 18.04.3:
  * Too many changes to list here</changelog>
  <changelog author="christophe@krop.fr" date="1534420800">- Update to 18.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.0.php
- Changes since 18.07.80:
  * Rework rectangle/arrow key handling to avoid "stuck edges" and 0x0px rectangle
  * Add license header to TextLabel.qml
  * Fix rendering of on-screen help texts for fractional scaling</changelog>
  <changelog author="lbeltrame@kde.org" date="1536235200">- Update to 18.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.1.php
- Changes since 18.08.0:
  * Fix missing notification title found by -Wswitch-enum</changelog>
  <changelog author="lbeltrame@kde.org" date="1539259200">- Update to 18.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.2.php
- Changes since 18.08.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1541678400">- Update to 18.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.08.3.php
- Changes since 18.08.2:
  * No code changes since 18.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1542715200">- Update to 18.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-beta.php
- Changes since 18.08.3:
  * Too many changes to list here</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1542715201">- Run spec-cleaner</changelog>
  <changelog author="lbeltrame@kde.org" date="1543838400">- Update to 18.11.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12-rc.php
- Changes since 18.11.80:
  * No code changes since 18.11.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1544788800">- Update to 18.12.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.0.php
- Changes since 18.11.90:
  * No code changes since 18.11.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1547208000">- Update to 18.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.1.php
- Changes since 18.12.0:
  * Use more https in links</changelog>
  <changelog author="lbeltrame@kde.org" date="1549713600">- Update to 18.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.2.php
- Changes since 18.12.1:
  * No code changes since 18.12.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1552132800">- Update to 18.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-18.12.3.php
- Changes since 18.12.2:
  * No code changes since 18.12.2</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1562155200">- Add spectacle-lang.tar.xz with updated Lithuanian translations
  (boo#1139359).</changelog>
</package>
<package pkgid="da230da16c1aca653356c22612c6f346ef77a2d62ed1819e5926f05be1e1514a" name="speech-dispatcher" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="790e44a9a00bfc636248d6384a0acaf32e8407b27b923278cb45fa854b1943f3" name="speech-dispatcher" arch="src">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1264939200">- don't enable daemon by default</changelog>
  <changelog author="vuntz@opensuse.org" date="1270641600">- Completely rework the package, based on the Fedora and Debian
  packages.
- Rename the source package to speech-dispatcher, to follow
  upstream name.</changelog>
  <changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 0.7.1:
  + Easy configuration of the client communication method using a
    single environment variable SPEECHD_ADDRESS.
  + Advanced autospawn -- server is autostarted only when its
    communication channel matches the communication channels
    requested by the client. Local server is not started when
    client attempts to connect to a remote server.
  + Both libspeechd and python library now report a detailed error
    information in case of connection failure (why has connect
    failed, why was it not possible to autostart the server, what
    has the server reported etc.) Clients can directly show this
    information to the user and the user doesn't have to search
    them in logfiles.
  + Improvements in memory usage
  + Cleanup of priorities of messages in logging output
  + Various bugfixes, cleanups and fine-tunnings
- Changes from version 0.7:
  + Speech Dispatcher uses UNIX style sockets as default means of
    communication, thus avoiding the necessity to choose a numeric
    port and greatly easying session integration
  + Autospawn -- server is started automatically when a client
    requests it. It can be forbidden in the appropriate server
    configuration file
  + Pulse Audio output reworked and fixed
  + Dispatcher runs as user service (not system service) by default
    and doesn't require the previous presence of
    ~/.speech-dispatcher directory
  + All logging is now managed centrally, not by separate options
  + Graceful audio fallback (e.g. if pulse is not working, use
    Alsa...)
  + Audio output to different soundsystems through the libao
    library
  + Various bugfixes and fine-tunnings
  + Updated documentation
- Drop speech-dispatcher_python-makefile.patch,
  speech-dispatcher_extlink.patch, speech-dispatcher_getline.patch,
  speech-dispatcher_libspeechd.patch: fixed upstream.
- Update speech-dispatcher_paths+files.patch from Debian.
- Add libao-devel BuildRequires, and pass --with-libao to
  configure.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310990400">- Add a gnome-speech Obsoletes: in GNOME 3, gnome-speech is
  deprecated and obsoleted by the use of speech-dispatcher.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366372800">- Update to 0.8beta1:
  + Python 3 compatibility of the Python bindings.
  + User configuration, logs and runtime files are now stored in
    directories according to the XDG specification.
  + Internationalization of spd-say and translations into
    Hungarian and Czech languages.
  + Espeak output can now use libsonic for faster speech.
  + Pico output module.
  + Lots of bugfixes, cleanups and fine-tunnings.
- Drop speech-dispatcher_paths+files.patch: fixed upstream.
- Replace python-setuptools with python3-setuptools.
- Add intltool and libtool BuildRequires: new dependencies.
- Rename python-speechd to python3-speechd, as the bindings are
  for python 3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1367755200">- Update to version 0.8:
  + No changes since 0.8beta1.</changelog>
  <changelog author="p.drouand@gmail.com" date="1371470400">- Use systemd instead of sysvinit
- Remove %clean section</changelog>
  <changelog author="mgorse@suse.com" date="1380283200">- Add bnc-831609-festival-crash.patch -- fix crash when unable to init
  festival module.</changelog>
  <changelog author="jsegitz@novell.com" date="1400846400">- added necessary macros for systemd files</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="797c80b9f1152f7bafa8d0186b975a5bb6153023d891a4f30137c35ae86baf85" name="speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="387b58b332f264339eb7bae1aeaeb0f13f5d2360f18dd6c578da74280db09027" name="speech-dispatcher" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="9580ba6f2aa5d2cdfc46627d131ae8a4686339a417d22a3fba3092c455b98bd3" name="speech-dispatcher" arch="src">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="vuntz@opensuse.org" date="1270641600">- Completely rework the package, based on the Fedora and Debian
  packages.
- Rename the source package to speech-dispatcher, to follow
  upstream name.</changelog>
  <changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 0.7.1:
  + Easy configuration of the client communication method using a
    single environment variable SPEECHD_ADDRESS.
  + Advanced autospawn -- server is autostarted only when its
    communication channel matches the communication channels
    requested by the client. Local server is not started when
    client attempts to connect to a remote server.
  + Both libspeechd and python library now report a detailed error
    information in case of connection failure (why has connect
    failed, why was it not possible to autostart the server, what
    has the server reported etc.) Clients can directly show this
    information to the user and the user doesn't have to search
    them in logfiles.
  + Improvements in memory usage
  + Cleanup of priorities of messages in logging output
  + Various bugfixes, cleanups and fine-tunnings
- Changes from version 0.7:
  + Speech Dispatcher uses UNIX style sockets as default means of
    communication, thus avoiding the necessity to choose a numeric
    port and greatly easying session integration
  + Autospawn -- server is started automatically when a client
    requests it. It can be forbidden in the appropriate server
    configuration file
  + Pulse Audio output reworked and fixed
  + Dispatcher runs as user service (not system service) by default
    and doesn't require the previous presence of
    ~/.speech-dispatcher directory
  + All logging is now managed centrally, not by separate options
  + Graceful audio fallback (e.g. if pulse is not working, use
    Alsa...)
  + Audio output to different soundsystems through the libao
    library
  + Various bugfixes and fine-tunnings
  + Updated documentation
- Drop speech-dispatcher_python-makefile.patch,
  speech-dispatcher_extlink.patch, speech-dispatcher_getline.patch,
  speech-dispatcher_libspeechd.patch: fixed upstream.
- Update speech-dispatcher_paths+files.patch from Debian.
- Add libao-devel BuildRequires, and pass --with-libao to
  configure.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310990400">- Add a gnome-speech Obsoletes: in GNOME 3, gnome-speech is
  deprecated and obsoleted by the use of speech-dispatcher.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366372800">- Update to 0.8beta1:
  + Python 3 compatibility of the Python bindings.
  + User configuration, logs and runtime files are now stored in
    directories according to the XDG specification.
  + Internationalization of spd-say and translations into
    Hungarian and Czech languages.
  + Espeak output can now use libsonic for faster speech.
  + Pico output module.
  + Lots of bugfixes, cleanups and fine-tunnings.
- Drop speech-dispatcher_paths+files.patch: fixed upstream.
- Replace python-setuptools with python3-setuptools.
- Add intltool and libtool BuildRequires: new dependencies.
- Rename python-speechd to python3-speechd, as the bindings are
  for python 3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1367755200">- Update to version 0.8:
  + No changes since 0.8beta1.</changelog>
  <changelog author="p.drouand@gmail.com" date="1371470400">- Use systemd instead of sysvinit
- Remove %clean section</changelog>
  <changelog author="mgorse@suse.com" date="1380283200">- Add bnc-831609-festival-crash.patch -- fix crash when unable to init
  festival module.</changelog>
  <changelog author="jsegitz@novell.com" date="1400846400">- added necessary macros for systemd files</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="7f79f79a04d1b95671ecc7c072f5689351ef601b46b90c116c08c529ec60fbf9" name="speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="71633910d9163cbc2e5a7f590b2352b60d2c9b4914f8c7ce766f07864834dbbf" name="speech-dispatcher-configure" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="1679cb94e381cbc0d1c0fcc40f8f80a87660d9e54a58e7e4278f1776a249327a" name="speech-dispatcher-configure" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="85eca625d097409edc59718bc04b8356a312b2eef8257f304d5724593e9c23fb" name="speech-dispatcher-configure" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="456e92c24e09c717076bd1800b6782d017d02ab859ba0ac0d7986878cf895e23" name="speech-dispatcher-configure" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="5bef6635afec21ee0a6743212f78b825b56eed7103adb1536f24109510d7203e" name="speech-dispatcher-module-espeak" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="af0c36ba3982a91829d4e89646adee59582f06eddb56fa722b3327edcb0eb8fe" name="speech-dispatcher-module-espeak" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.3.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
</package>
<package pkgid="8bdab1d7f4fbda6ecaa188b86f81671e89d9e53c1c11ee88fba5cdd691c6ca0c" name="speech-dispatcher-module-espeak" arch="i586">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="fdb651ff536893f1f892ef476c411a6b23e981a88dab2f09a2c3f747b92dcf41" name="speech-dispatcher-module-espeak" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="lp151.3.6.1"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1419076800">- Update to 0.8.1
  + User dictionaries support added to the IBMTTS driver
  + Added a pico configuration file for use with the generic driver
  + Better support for multi-arch enabled distros to facilitate the use of the
    i386 only IBMTTS driver being easily installable on an amd64 system
  + Bug fixes, and documentation cleanup
- Don't remove configuration in /usr/share/speech-dispatcher/config,
  because it is used by its configuration program to create user
  specific settings, while duplicate of it in /etc is system-wide</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1427457600">- cleanup spec file with spec-cleaner
- update to version 0.8.2:
  * Add convenience methods to the libspeech API to free module
    list and voice data structures.
  * Add method to the libspeechd API to get the current output
    module, and update the documentation accordingly.
  * The API is now licensed under the GNU Lesser General Public
    License v2.1 or later.
  * The spdconf configuration utility is now translatable.
  * Fixed a bug where speech-dispatcher would fail to start if the
    user configuration directory existed but did not contain a
    config file.
  * Install the spdconf desktop file.
- add rcspeech-dispatcherd symlink for service</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1437307200">- Update to version 0.8.3:
  * Add API methods to get language, rate, pitch, and volume.
  * A lot of code cleanup, and compatibility improvements.
  * Removed all references to GNOME Speech, since it has long since been
  deprecated.
  * Fix some inconsistancy in the SSIP API for voice type.
  * The SET VOICE SSIP command is now deprecated, and will be removed in 0.9.
  * The C library API now provides macro definitions for major, minor, and micro
  versions in libspeechd_versions.h.
  * The libsndfile library is now a mandetory dependency to improve the user
  experience around sound icons.
  * Fix a possible crash in the festival driver (drop bnc-831609-festival-crash.patch).
  * Add a configuration option to the espeak driver to show voice variants in the
  voice list. This will remain until a proper variants retrieval API is added
  for compatible synthesizers.</changelog>
  <changelog author="mgorse@suse.com" date="1463400000">- Update to version 0.8.4:
  + Updated documentation for required dependencies and where to
    find them.
  + Removed unused code.
  + Fixed compiler and GLib warnings.
  + Cleanup header definitions and inclusions.
  + Enabled silent rules by default
  + Fix language identification references.</changelog>
  <changelog author="ro@suse.de" date="1475582400">- speech-dispatcher.logrotate: move options to local scope
  to not affect logrotate configuration for other services
  (bsc#1001618)</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Drop %py_requires from python3-speechd: this is a python2
  dependency on a python3 package.</changelog>
  <changelog author="mgorse@suse.com" date="1505476800">- Update to version 0.8.7:
  + Further fixes to spd-conf, which should now work properly.
  + Split the espeak-ng driver code into its own source file.
  + Add a work-around to the espeak-ng driver to account for spaces
    in voice names which recently appeared in espeak-ng git master.
    This will properly be fixed in 0.9.
  + Voice names are not forced to lower case, due to espeak-ng
    git master now having multi-case voice names.
  + Fix stripped audio output from the flite module.
  + Further code and build improvements.
- Changes from version 0.8.6:
  + Various internal code improvements.
  + Fix more compiler warnings.
  + Python bug fixes with thanks to Sebastian Humenda.
- Changes from version 0.8.5:
  + Use GLib main loop for the main server thread
  + Implement a shutdown timer in the server
  + Add support for espeak-ng.
  + Document an ibmtts configuration option
  + Removal of configuration options in the code that were not
    actually being used.
  + Added a command-line argument to allow for custom modules
    location.
- Add ANNOUNCE; remove ChangeLog (no longer shipped)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043200">- Drop py_requires: this is a static python2-dependency on a
  python3 package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libspeechd2-32bit, required by
  libQt5TextToSpeech5-32bit.</changelog>
  <changelog author="aloisio@gmx.com" date="1518004800">- Update to version 0.8.8
  * Add German translation, thanks to Chris Leick for the patch
  * Fix some spelling mistakes, thanks to Paul Gevers for the patch
  * Some slight code improvements</changelog>
  <changelog author="ro@suse.de" date="1552996800">- set includedir to fix the entries in the pkg-config file
  (bsc#1129586)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553688000">- Revert setting includedir explicitly: upstream had this fixed in
  2015 in the build system directly (bsc#1129586 is thus no longer
  applicable since speech-dispatcher 0.8.4).</changelog>
</package>
<package pkgid="a417c2de5619515c6a3d01d57a0b5904cad643cbda53340a8fcd919a879036af" name="srp_daemon" arch="i586">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="d99acec184f96f3d225346caec2218fed5c4509a7fb848659651db0c9d7cb723" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="22.3" rel="lp151.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804801">- Update to rdma-core v18.1
  * Fix compilation issue with recent glibc
- Drop Remove-the-obsolete-libibcm-library.patch and
  umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch as they were
  fixed upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528977600">- Remove pandoc BuildRequires
  * Add prebuilt-pandoc.sh to pre-generate the man pages
  * Add prebuilt-pandoc.tgz containing pre-generated man pages
  * Extract man pages in the appropriate directory during build</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v22.3 (bsc#996146)
  - rdma-core-22.3:
  - suse: fix dracut support
  - mlx5: Fix man page of mlx5dv_create_flow_action_modify_header()
  - libhns: Bugfix for flush cqe in case multi-process
  - rdma-core-22.2:
  - ibacm: fix double hint.ai_family assignment in ib_acm_connect_open()
  - ibacm: acme does not work if server_mode != unix
  - ibacm: ib_acm_connect() is doing too much
  - verbs: The ibv_xsrq_pingpong "-c" option is broken
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - debian: Create empty pyverbs package for builds without pyverbs
  - verbs: Fix attribute returning
  - build: Fix pyverbs build issues on Debian
  - travis: Change SuSE package target due to Travis CI failures
  - verbs: Avoid inline send when using device memory in rc_pingpong
  - mlx5: Use copy loop to read from device memory
  - verbs: clear cmd buffer when creating indirection table
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0</changelog>
</package>
<package pkgid="76be3bda0d1360adf25cfaf9fb9a12339e7c261a4db6d92ea25a33b9ffaa185a" name="sssd" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="df917b3dd1dc46f30268f8249df69af23e6c61d79f54a98148f5094cf66173e5" name="sssd" arch="src">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="46ed9c4150f02c4abc76c6627c0017d4be47fb0d22f2eebabd3ddcad99518847" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="2f3b9285771c437505e9844ecbe3736c4469c43dbbf6dff86e0541481d8c53ae" name="sssd-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="159e318acb02a9b3e0c2a1d7dc1062d2f12d7ff7a753e1d2541b457a71b82ae4" name="sssd-ad" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="25b4052185005c6c725a48021a34e8cb7d00319cfff0d38daf9edc3eb2b38ca5" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="29d5504a8c35fcd835c71bc48422fd283724819ffc5d180e0ee931191733cd12" name="sssd-dbus" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="6e2b65a4fda305a5c2158a778b8979b79d15f43f38a6976d0ce1f8257af4d9fb" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="a30fcf2cd021b395c17e01067fb31de60b0b91b4c0c2b69d490eeb0a61e3f3cf" name="sssd-ipa" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="8f29afdb11468cce49701b0f27451ddd34b858dd20417fcad1f340ab7ce92a86" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="fadfc1cc43c200f3e8008a0cbb05c320d67b6a8a11b915cacda608420b276137" name="sssd-krb5" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="054cf1a6e4a82811213d23124d5b7a442aff83b561d6a4f709c9911cf7e08675" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="0a680fb576047c311d3607cf86275b43f0380a570ed26549951bd15585f934e8" name="sssd-krb5-common" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="1ae05173bf264b7d3dd2e3d2534076cbec1d388d028040a612fea6056ce31c8b" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="f3bd98a569244c96c9043105c523f3e0c7299d539b9f9adb51a551dac44287c8" name="sssd-ldap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="4d8baf8a9e99bbf8fe757151cf6a28c95eba171160e2775fb37670812ce7030e" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="fd7566fa901aaba8d5ec661d81ec3b5b07af311917dbf4bbb0498814a1a1ab61" name="sssd-proxy" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="d1694c154051566275e4c7e9a18273a36ded67c5638f1db3e539bf8a4040c16c" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="51de18c408d4fa380f782842d33af0d94c914fe4c85623a951a6d8e834fc9189" name="sssd-tools" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="57a3c7ec90e5d2262ae522a7029ee3f88259ed163dfca2633a226a28cbabd476" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="39135c0ca928bd0e9064c96c82da27e4aa0ad72384a8fb7c350cb0fb48b89a67" name="sssd-wbclient" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="975d8a0e3ee5d1d404143bfa02aa8f90f8ca097f5b4a664ede94de833860a5d1" name="sssd-wbclient" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="316ce8f25d64ec3f8b84fd4ce23522df8cacbfd18925b073edef32513d976fa2" name="sssd-wbclient-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="82db0c071467dbab748ff14d93931c19e272a29277eac23f26c52fc1f3fb32df" name="sssd-wbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="3b3550c57d5fc95e02c242484ab9c5e5351b1907bd120d70d5558cbab1984301" name="sssd-winbind-idmap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="241ba3a2616f300925770e40fc2f4cb3895598d89be97baf49e610d02a293da9" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp151.7.3.1"/>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1537963200">- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550664000">- Fix fallback_homedir returning '/' for empty home directories
  (CVE-2019-3811) (bsc#1121759)
- Install logrotate configuration (bsc#1004220)
- Strip whitespaces in netgroup triples (bsc#1087320)
- Align systemd service file with upstream
  * Run interactive and change service type to notify (bsc#1120852)
  * Replace deprecated '-f' and use '--logger'
- Fix sssd not starting in foreground mode (bsc#1125277)
- Added patches:
  * 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  * 0004-Strip-whitespaces-in-netgroup-triple.patch
  * 0005-nss-sssd-returns-for-emtpy-home-directories.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
</package>
<package pkgid="32839b0461a75dc48cc535e1ab0f085be4dcfd735a0b6912f2fb54fedbda7fa2" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.3" rel="lp151.2.3.1"/>
  <changelog author="jason.record@suse.com" date="1517227200">- Includes X without display issue (bsc#1077813)
- Fixes for Infiniband (bsc#1071294)
- Using chrony for NTP (bsc#1077818)</changelog>
  <changelog author="jason.record@suse.com" date="1517227201">- Removed sam_info since suse_sam is no longer available
- Assigned SLE15 to SLES_VER selections (bsc#1078168)</changelog>
  <changelog author="jason.record@suse.com" date="1517313600">- Removed OPTION_SAM from man pages and resource file
- Validated missing commands
- Updated apparmor with systemctl service
- Replaced deprecated networking commands (bsc#1078318)</changelog>
  <changelog author="jason.record@suse.com" date="1517486400">- Added tuned feature OPTION_TUNED tuned.txt (bsc#1071545)
- Fixed udev service
- Fixed no disk device with sfdisk (bsc#1078638)</changelog>
  <changelog author="jason.record@suse.com" date="1517572800">- Accounts for firewalld now (bsc#1079137)
- Added dmesg taint seach
- Removed mii-tool from networking
- Updated HA to use chrony
- Added kdumptool calibrate to crash.txt
- Removed SLES_VER case for sles8,9 and 10</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jason.record@suse.com" date="1529064000">- Blacklist sched_domain from proc.txt (bsc#1046681)</changelog>
  <changelog author="jason.record@suse.com" date="1531224000">- Added only sched_domain from cpu0</changelog>
  <changelog author="jason.record@suse.com" date="1531396800">- Added backup rpm database directory
- Updated URLs in documentation</changelog>
  <changelog author="jason.record@suse.com" date="1535025600">- Added vulnerabilites check in basic-health.txt (bsc#1105849)</changelog>
  <changelog author="jason.record@suse.com" date="1539259200">- udev service and journal content (bsc#1051797)
- supportconfig collects tuned profile settings (bsc#1071545)
- sfdisk -d no disk device specified (bsc#1043311)</changelog>
  <changelog author="jason.record@suse.com" date="1540555200">- Exclude pam.txt per GDPR by default (bsc#1112461)</changelog>
  <changelog author="jason.record@suse.com" date="1545998400">- Clarified -x functionality in supportconfig(8) (bsc#1115245)
- Dump find errors in ib_info</changelog>
  <changelog author="jason.record@suse.com" date="1548676800">- Added firewall-cmd info
- btrfs filesystem usage
- Add ls -lA --time-style=long-iso /etc/products.d/
- Dump lsof errors
- Added corosync status to ha_info</changelog>
  <changelog author="jason.record@suse.com" date="1548849600">- Corrected spec file errors</changelog>
  <changelog author="jason.record@suse.com" date="1550232000">- Included additional SUSE separation (bsc#1125609)
- Merged added listing of locked packes by zypper #41</changelog>
  <changelog author="jason.record@suse.com" date="1550491200">- Corrected missed SUSE separation lines
- Fixed invalid exit code commands (bsc#1125666)
- CVE-2018-19640: supportutils: Users can kill arbitrary processes
  (CVE-2018-19640 bsc#1118463)
- User can overwrite arbitrary log files in support tar
  (CVE-2018-19638 bsc#1118460)
- Code execution if run with -v
  (CVE-2018-19639 bsc#1118462)
- Static temporary filename allows overwriting of files
  (CVE-2018-19637 bsc#1117776)</changelog>
  <changelog author="jason.record@suse.com" date="1551441600">- Updated to version 3.1.1
  + Fixed X missing /prob/fb error (bsc#1127069)
  + Fixed dasdview -f (bsc#1109664)
  + Clarified -t help description (bsc#1121043)
  + Fixed grep error in NTP when /etc/cron.d is empty (bsc#1127063)
  + Collects systemd journal with minimum install (bsc#1094225)
  + Supportconfig fails on bzip archives (bsc#1120049)
  + Get few drbd output &amp; configuration #42</changelog>
  <changelog author="jason.record@suse.com" date="1551700800">- Updated to version 3.1.2
  + Fixed missing sapconf and log (bsc#1081326)
  + Added timed_log_cmd to hwinfo and showmount commands (bsc#1120967)</changelog>
  <changelog author="jason.record@suse.com" date="1557403200">- Updated to version 3.1.3
  + Uses SUSE FTP servers (bsc#1132865)
  + btrfs quota #43
  + supportconfig: open-files: add file flags #44
  + Merged etc_info: Add support for .cfg files in /etc dir #46
  + Silence warning in rpm backup db collection path #47
  + Set files in tarball to 660 instead of 600 #48
  + SUSE separation finalized (bsc#1125623)
  + Default compression through xz, but -z forces bzip2
  + Updated man pages (bsc#1088234)
  + Changed VAR_OPTION_BIN_TIMEOUT_SEC from 300 to 120
  + Avoids some IO delays (bsc#1100529)
  + Corrected supported services help info for -U
  + Collects iSCSI Target information (bsc#1133844)
  + FTPES uses --ssl-reqd instead of depricated --ftp-ssl
  + Defaults to https FTP server uploads (bsc#1134599)</changelog>
</package>
<package pkgid="69aa61087d7da9f3e3b4f0e32acaa92de18755387f5eea8a1d7bd406a3e14f34" name="supportutils" arch="src">
  <version epoch="0" ver="3.1.3" rel="lp151.2.3.1"/>
  <changelog author="jason.record@suse.com" date="1517227200">- Includes X without display issue (bsc#1077813)
- Fixes for Infiniband (bsc#1071294)
- Using chrony for NTP (bsc#1077818)</changelog>
  <changelog author="jason.record@suse.com" date="1517227201">- Removed sam_info since suse_sam is no longer available
- Assigned SLE15 to SLES_VER selections (bsc#1078168)</changelog>
  <changelog author="jason.record@suse.com" date="1517313600">- Removed OPTION_SAM from man pages and resource file
- Validated missing commands
- Updated apparmor with systemctl service
- Replaced deprecated networking commands (bsc#1078318)</changelog>
  <changelog author="jason.record@suse.com" date="1517486400">- Added tuned feature OPTION_TUNED tuned.txt (bsc#1071545)
- Fixed udev service
- Fixed no disk device with sfdisk (bsc#1078638)</changelog>
  <changelog author="jason.record@suse.com" date="1517572800">- Accounts for firewalld now (bsc#1079137)
- Added dmesg taint seach
- Removed mii-tool from networking
- Updated HA to use chrony
- Added kdumptool calibrate to crash.txt
- Removed SLES_VER case for sles8,9 and 10</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jason.record@suse.com" date="1529064000">- Blacklist sched_domain from proc.txt (bsc#1046681)</changelog>
  <changelog author="jason.record@suse.com" date="1531224000">- Added only sched_domain from cpu0</changelog>
  <changelog author="jason.record@suse.com" date="1531396800">- Added backup rpm database directory
- Updated URLs in documentation</changelog>
  <changelog author="jason.record@suse.com" date="1535025600">- Added vulnerabilites check in basic-health.txt (bsc#1105849)</changelog>
  <changelog author="jason.record@suse.com" date="1539259200">- udev service and journal content (bsc#1051797)
- supportconfig collects tuned profile settings (bsc#1071545)
- sfdisk -d no disk device specified (bsc#1043311)</changelog>
  <changelog author="jason.record@suse.com" date="1540555200">- Exclude pam.txt per GDPR by default (bsc#1112461)</changelog>
  <changelog author="jason.record@suse.com" date="1545998400">- Clarified -x functionality in supportconfig(8) (bsc#1115245)
- Dump find errors in ib_info</changelog>
  <changelog author="jason.record@suse.com" date="1548676800">- Added firewall-cmd info
- btrfs filesystem usage
- Add ls -lA --time-style=long-iso /etc/products.d/
- Dump lsof errors
- Added corosync status to ha_info</changelog>
  <changelog author="jason.record@suse.com" date="1548849600">- Corrected spec file errors</changelog>
  <changelog author="jason.record@suse.com" date="1550232000">- Included additional SUSE separation (bsc#1125609)
- Merged added listing of locked packes by zypper #41</changelog>
  <changelog author="jason.record@suse.com" date="1550491200">- Corrected missed SUSE separation lines
- Fixed invalid exit code commands (bsc#1125666)
- CVE-2018-19640: supportutils: Users can kill arbitrary processes
  (CVE-2018-19640 bsc#1118463)
- User can overwrite arbitrary log files in support tar
  (CVE-2018-19638 bsc#1118460)
- Code execution if run with -v
  (CVE-2018-19639 bsc#1118462)
- Static temporary filename allows overwriting of files
  (CVE-2018-19637 bsc#1117776)</changelog>
  <changelog author="jason.record@suse.com" date="1551441600">- Updated to version 3.1.1
  + Fixed X missing /prob/fb error (bsc#1127069)
  + Fixed dasdview -f (bsc#1109664)
  + Clarified -t help description (bsc#1121043)
  + Fixed grep error in NTP when /etc/cron.d is empty (bsc#1127063)
  + Collects systemd journal with minimum install (bsc#1094225)
  + Supportconfig fails on bzip archives (bsc#1120049)
  + Get few drbd output &amp; configuration #42</changelog>
  <changelog author="jason.record@suse.com" date="1551700800">- Updated to version 3.1.2
  + Fixed missing sapconf and log (bsc#1081326)
  + Added timed_log_cmd to hwinfo and showmount commands (bsc#1120967)</changelog>
  <changelog author="jason.record@suse.com" date="1557403200">- Updated to version 3.1.3
  + Uses SUSE FTP servers (bsc#1132865)
  + btrfs quota #43
  + supportconfig: open-files: add file flags #44
  + Merged etc_info: Add support for .cfg files in /etc dir #46
  + Silence warning in rpm backup db collection path #47
  + Set files in tarball to 660 instead of 600 #48
  + SUSE separation finalized (bsc#1125623)
  + Default compression through xz, but -z forces bzip2
  + Updated man pages (bsc#1088234)
  + Changed VAR_OPTION_BIN_TIMEOUT_SEC from 300 to 120
  + Avoids some IO delays (bsc#1100529)
  + Corrected supported services help info for -U
  + Collects iSCSI Target information (bsc#1133844)
  + FTPES uses --ssl-reqd instead of depricated --ftp-ssl
  + Defaults to https FTP server uploads (bsc#1134599)</changelog>
</package>
<package pkgid="07046dc58ce3a45c4c7fd450454087246ec0b24f6f95fcd5aec1de175d77b892" name="system-user-root" arch="noarch">
  <version epoch="0" ver="20190513" rel="lp151.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1497700800">- New package, splitted from system-users</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add group trusted [bsc#1044014]</changelog>
  <changelog author="kukuk@suse.de" date="1498046400">- Add some BuildIgnores for bootstrapping</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1557748800">- Bump to version 20190513:
  * Invalidate root password by default (bsc#1134524)</changelog>
</package>
<package pkgid="01d8defc8c6a5c8933bf1d82234c1e3cbc3ff3fc7b1998949187d2ff8c60dd9d" name="system-user-root" arch="src">
  <version epoch="0" ver="20190513" rel="lp151.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1497700800">- New package, splitted from system-users</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add group trusted [bsc#1044014]</changelog>
  <changelog author="kukuk@suse.de" date="1498046400">- Add some BuildIgnores for bootstrapping</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1557748800">- Bump to version 20190513:
  * Invalidate root password by default (bsc#1134524)</changelog>
</package>
<package pkgid="406b53c4764870ae1723307a0095f37a44558b9736b971c20ec90ce676938e92" name="targetcli-fb" arch="src">
  <version epoch="0" ver="2.1.49" rel="lp151.2.3.1"/>
  <changelog author="lduncan@suse.com" date="1461067200">- Creating from latest upstream version 2.1.fb43</changelog>
  <changelog author="lduncan@suse.com" date="1469448000">-  updated spec file: removed Provides/Obsoletes of
  targetcli and python-targetcli, and added
  Conflicts with targetcli (bsc#986475)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Trim macro indirections and empty macros</changelog>
  <changelog author="hare@suse.com" date="1492084800">- Update to version 2.1.fb46 (bsc#1032833):
  * version 2.1.fb44
  * Remove build scripts for RPM and Debian packages
  * Add Gentoo to the list of distributions that ship targetcli-fb
  * Add support to create/delete ALUA groups on a storage object
  * Add support to set/get a LUN's ALUA group
  * version 2.1.fb45
  * Create ALUA dir and def group in UI with storage object
  * Clear backstore cache on refresh
  * version 2.1.fb46</changelog>
  <changelog author="lszhu@suse.com" date="1502971200">- Update to version 2.1.fb47
  * Improving ALUA and TCMU support, as well as moving the default
  directory for APTPL files from /var/target to /etc/target,
  for better FHS compliance.</changelog>
  <changelog author="lduncan@suse.com" date="1513339200">- Moved targetcli-fb-2.1.fb47.tar.gz to targetcli-fb-2.1.fb47.tar.xz,
  after appropriate decompression/compression, to match SPEC and
  _service file. Updated _servicedata to match.</changelog>
  <changelog author="lduncan@suse.com" date="1513339201">- Ran "spec-cleaner" over the SPEC file, to clean it up, before
  support for Python3 is added.</changelog>
  <changelog author="lduncan@suse.com" date="1515067200">- Converted RPM SPEC file to singlepsec format (bsc#1045332),
  updating SPEC file only. This breaks this package into two
  packages. The new base package is called targetcli-fb-common,
  and does not depend on the python version. The other package
  is python-version dependent, and is called either
  python2-targetcli-fb or python3-targetcli-fb, dpending on
  which version of Python you wish to use.</changelog>
  <changelog author="lduncan@suse.com" date="1515067201">- Added dependency on dbus package to SPEC file (bsc#1073913)</changelog>
  <changelog author="lduncan@suse.com" date="1516017600">- Removed duplicate BuildRequires line, and add Conflicts for
  sub-package</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- Fix upgrade path by provide/obsolete version-release</changelog>
  <changelog author="olaf@aepfle.de" date="1519560000">- Fix upgrade path by provide/obsolete targetcli/targetcli-fb (bsc#1082693)</changelog>
  <changelog author="ddiss@suse.com" date="1523361600">- Automatically generate version string from upstream tag
  + Retain current fb-removed version format used
  + Rename targetcli-fb-2.1.fb47.tar.xz to targetcli-fb-2.1.47.tar.xzar.xz
    and cleanup hardcoded duplicate name/version values in spec</changelog>
  <changelog author="ddiss@suse.com" date="1523448000">- Merge RBD support from non-fb version (bsc#1079329)
  + Split-out-blockdev-readonly-state-detection-helper.patch
  + rbd-support.patch (SLE/Leap only, due to LIO kernel dependency)
  + Add explicit Provides for "python-rtslib-rbd"
- Detect write-protected block devices (bsc#1070815)
  + Auto-detect-readonly-state-for-iblock-devices.patch
  + Use-signed-char-instead-of-char.patch</changelog>
  <changelog author="lduncan@suse.com" date="1524225600">- Only save current config to backup if current
  config exists (bsc#1090424), adding patch:
  * targetcli-only-save-old-config-if-present.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539864000">- Update to version 2.1.49:
  * version 2.1.fb49
  * targetcli-fb: Add support for media change
  * fix the parameter of define_config_group_param
  * saveconfig: handle backups with block-level delete
  * saveconfig: way for block-level save with delete command
  * create: add a way to set control string
  * fix amount of backup files in backup dir
  * config: add saveconfig command to StorageObject level
  * Allow to customize a home directory
  * Fix default max_backup_files in ui_command_saveconfig
  * MappedLuns and Luns max number is not the same anymore
  * Use signed char instead of char
  * version 2.1.fb48
  * remove wrong exit code from targetcli --version
  * backup: global option to tune max no. of backup conf files
  * config: rename key 'kept_backups' as 'max_backup_files'
  * config: backup when current config is different from recent backup copy
  * config: defend on '/etc/target/backup' directory
  * Auto-detect readonly state for iblock devices
  * Read number of backup files to keep from file
  * skip refreshing user backed storage object when it is null
  * Replace dbus-python with GObject Introspection
  This replaces targetcli-fb-2.1.47.tar.xz with targetcli-fb-2.1.49.tar.xz,
  and removes the following patches:
  * Auto-detect-readonly-state-for-iblock-devices.patch
  * Use-signed-char-instead-of-char.patch
  * targetcli-only-save-old-config-if-present.patch
  and updates the SPEC file.</changelog>
  <changelog author="ddiss@suse.com" date="1544184000">- Enable RBD support for SLE/Leap 15+ (bsc#1118516)</changelog>
  <changelog author="lduncan@suse.com" date="1549540800">- Ensure this package and the deprecated lio-utils package
  do not run at the same time, in a sane way (bsc#1123423),
  updating the source file targetcli-fb.service. Also, updated
  the SPEC file with new year, updated URL, and http-&gt;https.</changelog>
  <changelog author="ddiss@suse.com" date="1554292800">- support emulate_pr attribute changes (bsc#1121998)
  + Add-emulate_pr-backstore-attribute.patch</changelog>
</package>
<package pkgid="977af7c16b086325a6e6a21b5fa4cc8b4f2332b71a71bd532f45fa262059a4dd" name="targetcli-fb-common" arch="noarch">
  <version epoch="0" ver="2.1.49" rel="lp151.2.3.1"/>
  <changelog author="lduncan@suse.com" date="1461067200">- Creating from latest upstream version 2.1.fb43</changelog>
  <changelog author="lduncan@suse.com" date="1469448000">-  updated spec file: removed Provides/Obsoletes of
  targetcli and python-targetcli, and added
  Conflicts with targetcli (bsc#986475)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Trim macro indirections and empty macros</changelog>
  <changelog author="hare@suse.com" date="1492084800">- Update to version 2.1.fb46 (bsc#1032833):
  * version 2.1.fb44
  * Remove build scripts for RPM and Debian packages
  * Add Gentoo to the list of distributions that ship targetcli-fb
  * Add support to create/delete ALUA groups on a storage object
  * Add support to set/get a LUN's ALUA group
  * version 2.1.fb45
  * Create ALUA dir and def group in UI with storage object
  * Clear backstore cache on refresh
  * version 2.1.fb46</changelog>
  <changelog author="lszhu@suse.com" date="1502971200">- Update to version 2.1.fb47
  * Improving ALUA and TCMU support, as well as moving the default
  directory for APTPL files from /var/target to /etc/target,
  for better FHS compliance.</changelog>
  <changelog author="lduncan@suse.com" date="1513339200">- Moved targetcli-fb-2.1.fb47.tar.gz to targetcli-fb-2.1.fb47.tar.xz,
  after appropriate decompression/compression, to match SPEC and
  _service file. Updated _servicedata to match.</changelog>
  <changelog author="lduncan@suse.com" date="1513339201">- Ran "spec-cleaner" over the SPEC file, to clean it up, before
  support for Python3 is added.</changelog>
  <changelog author="lduncan@suse.com" date="1515067200">- Converted RPM SPEC file to singlepsec format (bsc#1045332),
  updating SPEC file only. This breaks this package into two
  packages. The new base package is called targetcli-fb-common,
  and does not depend on the python version. The other package
  is python-version dependent, and is called either
  python2-targetcli-fb or python3-targetcli-fb, dpending on
  which version of Python you wish to use.</changelog>
  <changelog author="lduncan@suse.com" date="1515067201">- Added dependency on dbus package to SPEC file (bsc#1073913)</changelog>
  <changelog author="lduncan@suse.com" date="1516017600">- Removed duplicate BuildRequires line, and add Conflicts for
  sub-package</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- Fix upgrade path by provide/obsolete version-release</changelog>
  <changelog author="olaf@aepfle.de" date="1519560000">- Fix upgrade path by provide/obsolete targetcli/targetcli-fb (bsc#1082693)</changelog>
  <changelog author="ddiss@suse.com" date="1523361600">- Automatically generate version string from upstream tag
  + Retain current fb-removed version format used
  + Rename targetcli-fb-2.1.fb47.tar.xz to targetcli-fb-2.1.47.tar.xzar.xz
    and cleanup hardcoded duplicate name/version values in spec</changelog>
  <changelog author="ddiss@suse.com" date="1523448000">- Merge RBD support from non-fb version (bsc#1079329)
  + Split-out-blockdev-readonly-state-detection-helper.patch
  + rbd-support.patch (SLE/Leap only, due to LIO kernel dependency)
  + Add explicit Provides for "python-rtslib-rbd"
- Detect write-protected block devices (bsc#1070815)
  + Auto-detect-readonly-state-for-iblock-devices.patch
  + Use-signed-char-instead-of-char.patch</changelog>
  <changelog author="lduncan@suse.com" date="1524225600">- Only save current config to backup if current
  config exists (bsc#1090424), adding patch:
  * targetcli-only-save-old-config-if-present.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539864000">- Update to version 2.1.49:
  * version 2.1.fb49
  * targetcli-fb: Add support for media change
  * fix the parameter of define_config_group_param
  * saveconfig: handle backups with block-level delete
  * saveconfig: way for block-level save with delete command
  * create: add a way to set control string
  * fix amount of backup files in backup dir
  * config: add saveconfig command to StorageObject level
  * Allow to customize a home directory
  * Fix default max_backup_files in ui_command_saveconfig
  * MappedLuns and Luns max number is not the same anymore
  * Use signed char instead of char
  * version 2.1.fb48
  * remove wrong exit code from targetcli --version
  * backup: global option to tune max no. of backup conf files
  * config: rename key 'kept_backups' as 'max_backup_files'
  * config: backup when current config is different from recent backup copy
  * config: defend on '/etc/target/backup' directory
  * Auto-detect readonly state for iblock devices
  * Read number of backup files to keep from file
  * skip refreshing user backed storage object when it is null
  * Replace dbus-python with GObject Introspection
  This replaces targetcli-fb-2.1.47.tar.xz with targetcli-fb-2.1.49.tar.xz,
  and removes the following patches:
  * Auto-detect-readonly-state-for-iblock-devices.patch
  * Use-signed-char-instead-of-char.patch
  * targetcli-only-save-old-config-if-present.patch
  and updates the SPEC file.</changelog>
  <changelog author="ddiss@suse.com" date="1544184000">- Enable RBD support for SLE/Leap 15+ (bsc#1118516)</changelog>
  <changelog author="lduncan@suse.com" date="1549540800">- Ensure this package and the deprecated lio-utils package
  do not run at the same time, in a sane way (bsc#1123423),
  updating the source file targetcli-fb.service. Also, updated
  the SPEC file with new year, updated URL, and http-&gt;https.</changelog>
  <changelog author="ddiss@suse.com" date="1554292800">- support emulate_pr attribute changes (bsc#1121998)
  + Add-emulate_pr-backstore-attribute.patch</changelog>
</package>
<package pkgid="531bad95dd551fa9747a61c2789b0492c02d5fd5abef14c6daaf71abb32445ae" name="tcmu-runner" arch="src">
  <version epoch="0" ver="1.4.0" rel="lp151.3.3.1"/>
  <changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
  <changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
  <changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
  <changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
  <changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
  <changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
  <changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
  <changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
  <changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>
  <changelog author="lduncan@suse.com" date="1505908800">- Add two patches: make target_core_user.h local, to insulate
  tcmu-runner from kernel version/data structure/naming
  changes, and add include of &lt;sys/uio.h&gt; to that file,
  to fix "stuct iovec" not defined issue  (bsc#1058303),
  adding patches:
  * tcmu-runner-add-local-target_core_user-h
  * tcmu-runner-remove-uio-include-for-iovec.patch
  The latter patch is added only for SUSE version &gt;= 13.3,
  since it is only needed there.</changelog>
  <changelog author="ddiss@suse.com" date="1518177600">- Update to version 1.3.0; (fate#322524)
  + Improved Ceph RBD integration
  + Support XCOPY copy-offload commands
  + Support COMPARE_AND_WRITE, with Ceph OSD request mapping
  + Asynchronous I/O improvements and bug fixes
- Remove a number of downstream patches now carried upstream:
  + glfs-discard-glfs_check_config
  + fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
  + only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
  + fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
  + removed-all-check_config-callback-implementations-to-avoid-security-issues
  + tcmu-runner-add-local-target_core_user-h
- Remove development packages (bsc#1080619)
  + API discontinued upstream
- Add fix for -Werror-return-type failures:
  + api-avoid-compiler-Werror-return-type-failures.patch
- Add fix for library versioning:
  + build-drop-versionless-libtcmu.so-symlink.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539950400">- Update to version 1.4.0:
  * tcmu-runner: bump version to 1.4.0
  * Disable explicit alua support.
  * logger: notification on changing the options for dynamic reloading
  * logger: update .gitignore for logrotate.conf_install.cmake
  * logger: fix the return value
  * Sync sig handler naming.
  * Add logrotate support
  * Move starting log message.
  * Allow log file restart from SIGHUP
  * Simplify log outputs
  Replacing tcmu-runner-1.3.0.tar.gz with tcmu-runner-1.4.0.tar.xz,
  updating the SPEC file, and removing patches:
  * api-avoid-compiler-Werror-return-type-failures.patch
  * build-drop-versionless-libtcmu.so-symlink.patch
  * tcmu-runner-remove-uio-include-for-iovec.patch
  * support custom cephx credentials; (bsc#1135369)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558440000">- Rename openSUSE zbc patches:
  + file_zbc-fixed-compile-error-under-ppc64le -&gt;
    file_zbc-fixed-compile-error-under-ppc64le.patch
  + file_zbc-optionally-build-zbc-handler -&gt;
    file_zbc-optionally-build-zbc-handler.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558526400">- Add explicit libtcmu package dependency to avoid incorrect upstream
  .so versioning; (bsc#1135815)</changelog>
</package>
<package pkgid="724b0719adc77ee76796d1d8f276512b154774b1dc2b7995deaf11b1ce07b9a5" name="tcmu-runner" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp151.3.3.1"/>
  <changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
  <changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
  <changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
  <changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
  <changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
  <changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
  <changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
  <changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
  <changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>
  <changelog author="lduncan@suse.com" date="1505908800">- Add two patches: make target_core_user.h local, to insulate
  tcmu-runner from kernel version/data structure/naming
  changes, and add include of &lt;sys/uio.h&gt; to that file,
  to fix "stuct iovec" not defined issue  (bsc#1058303),
  adding patches:
  * tcmu-runner-add-local-target_core_user-h
  * tcmu-runner-remove-uio-include-for-iovec.patch
  The latter patch is added only for SUSE version &gt;= 13.3,
  since it is only needed there.</changelog>
  <changelog author="ddiss@suse.com" date="1518177600">- Update to version 1.3.0; (fate#322524)
  + Improved Ceph RBD integration
  + Support XCOPY copy-offload commands
  + Support COMPARE_AND_WRITE, with Ceph OSD request mapping
  + Asynchronous I/O improvements and bug fixes
- Remove a number of downstream patches now carried upstream:
  + glfs-discard-glfs_check_config
  + fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
  + only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
  + fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
  + removed-all-check_config-callback-implementations-to-avoid-security-issues
  + tcmu-runner-add-local-target_core_user-h
- Remove development packages (bsc#1080619)
  + API discontinued upstream
- Add fix for -Werror-return-type failures:
  + api-avoid-compiler-Werror-return-type-failures.patch
- Add fix for library versioning:
  + build-drop-versionless-libtcmu.so-symlink.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539950400">- Update to version 1.4.0:
  * tcmu-runner: bump version to 1.4.0
  * Disable explicit alua support.
  * logger: notification on changing the options for dynamic reloading
  * logger: update .gitignore for logrotate.conf_install.cmake
  * logger: fix the return value
  * Sync sig handler naming.
  * Add logrotate support
  * Move starting log message.
  * Allow log file restart from SIGHUP
  * Simplify log outputs
  Replacing tcmu-runner-1.3.0.tar.gz with tcmu-runner-1.4.0.tar.xz,
  updating the SPEC file, and removing patches:
  * api-avoid-compiler-Werror-return-type-failures.patch
  * build-drop-versionless-libtcmu.so-symlink.patch
  * tcmu-runner-remove-uio-include-for-iovec.patch
  * support custom cephx credentials; (bsc#1135369)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558440000">- Rename openSUSE zbc patches:
  + file_zbc-fixed-compile-error-under-ppc64le -&gt;
    file_zbc-fixed-compile-error-under-ppc64le.patch
  + file_zbc-optionally-build-zbc-handler -&gt;
    file_zbc-optionally-build-zbc-handler.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558526400">- Add explicit libtcmu package dependency to avoid incorrect upstream
  .so versioning; (bsc#1135815)</changelog>
</package>
<package pkgid="21e1bf42e5c5ee6ac25f2a8aa95653dee2938179bc158c4d5462e6fefa8778f4" name="tcmu-runner-handler-rbd" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp151.3.3.1"/>
  <changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
  <changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
  <changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
  <changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
  <changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
  <changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
  <changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
  <changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
  <changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
  <changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>
  <changelog author="lduncan@suse.com" date="1505908800">- Add two patches: make target_core_user.h local, to insulate
  tcmu-runner from kernel version/data structure/naming
  changes, and add include of &lt;sys/uio.h&gt; to that file,
  to fix "stuct iovec" not defined issue  (bsc#1058303),
  adding patches:
  * tcmu-runner-add-local-target_core_user-h
  * tcmu-runner-remove-uio-include-for-iovec.patch
  The latter patch is added only for SUSE version &gt;= 13.3,
  since it is only needed there.</changelog>
  <changelog author="ddiss@suse.com" date="1518177600">- Update to version 1.3.0; (fate#322524)
  + Improved Ceph RBD integration
  + Support XCOPY copy-offload commands
  + Support COMPARE_AND_WRITE, with Ceph OSD request mapping
  + Asynchronous I/O improvements and bug fixes
- Remove a number of downstream patches now carried upstream:
  + glfs-discard-glfs_check_config
  + fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
  + only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
  + fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
  + removed-all-check_config-callback-implementations-to-avoid-security-issues
  + tcmu-runner-add-local-target_core_user-h
- Remove development packages (bsc#1080619)
  + API discontinued upstream
- Add fix for -Werror-return-type failures:
  + api-avoid-compiler-Werror-return-type-failures.patch
- Add fix for library versioning:
  + build-drop-versionless-libtcmu.so-symlink.patch</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1539950400">- Update to version 1.4.0:
  * tcmu-runner: bump version to 1.4.0
  * Disable explicit alua support.
  * logger: notification on changing the options for dynamic reloading
  * logger: update .gitignore for logrotate.conf_install.cmake
  * logger: fix the return value
  * Sync sig handler naming.
  * Add logrotate support
  * Move starting log message.
  * Allow log file restart from SIGHUP
  * Simplify log outputs
  Replacing tcmu-runner-1.3.0.tar.gz with tcmu-runner-1.4.0.tar.xz,
  updating the SPEC file, and removing patches:
  * api-avoid-compiler-Werror-return-type-failures.patch
  * build-drop-versionless-libtcmu.so-symlink.patch
  * tcmu-runner-remove-uio-include-for-iovec.patch
  * support custom cephx credentials; (bsc#1135369)</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558440000">- Rename openSUSE zbc patches:
  + file_zbc-fixed-compile-error-under-ppc64le -&gt;
    file_zbc-fixed-compile-error-under-ppc64le.patch
  + file_zbc-optionally-build-zbc-handler -&gt;
    file_zbc-optionally-build-zbc-handler.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1558526400">- Add explicit libtcmu package dependency to avoid incorrect upstream
  .so versioning; (bsc#1135815)</changelog>
</package>
<package pkgid="435b09929571ac8d9c0e9e19caf1029cdb056d98982d5b1c78740b39ecc42a8c" name="tcsh" arch="i586">
  <version epoch="0" ver="6.20.00" rel="lp151.3.3.1"/>
  <changelog author="werner@suse.de" date="1421150400">- Add patch tcsh-6.18.00-history-file-locking.patch for bsc#901076
  Cluster switch does not started completely packages on other node
- Modified patch  tcsh-6.18.01-history-merge.dif to fit with former</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup with spec-cleaner to order header data
- Use %lang_package macro to remove redundant stuff
- Drop unused patch tcsh-6.15.00-blanks.dif
- Run make with more threads
- Move the commented check to check section to silence rpmlint</changelog>
  <changelog author="werner@suse.de" date="1422619200">- Enable tcsh checks but be aware that this can not be done in parallel
- Backup tcsh-6.15.00-blanks.dif away before update a working copy</changelog>
  <changelog author="werner@suse.de" date="1430740800">- Update tcsh to patch level 6.18.03 - 20150503
  * PR/437: Nakajima Akira: Fix segmentation fault reading input files
  * PR/291: Print job status messages to stderr.
  * Fridolin Pokorny NUL in `` does not mean EOF.
  * Pavel Raiskup fix hang with:
    while (1)
    ( date &amp; ; wait )
    end
  * Add cdtohome special variable (Martin Tournoij)
  * Fix root prompt char for windows (Corinna Vinschen)
  * For "next" completion matches only consider exact matches of the
    previous word (Jamie Landeg-Jones)
  * Fix echo "\1" for echo_style=both where the first character was
    not processed properly (Gary Duzan)
- Remove patches now upstream
  * tcsh-6.18.01-blk_buf.patch
  * tcsh-6.18.01-metakey.patch
- Rename patches
  tcsh-6.17.03-colorls.dif becomes tcsh-6.18.03-colorls.dif
  tcsh-6.17.10-catalogs.dif becomes tcsh-6.18.03-catalogs.dif
  tcsh-6.18.00-history-file-locking.patch becomes tcsh-6.18.03-history-file-locking.patch
  tcsh-6.18.01-history-merge.dif becomes tcsh-6.18.03-history-merge.dif
  tcsh-6.18.00.dif becomes tcsh-6.18.03.dif</changelog>
  <changelog author="werner@suse.de" date="1430827200">- Update tcsh to patch level 6.18.04 - 20150504
  * revert fix echo "\1", it is incorrect.
  * revert fix to PR/437, breaks short strings.</changelog>
  <changelog author="werner@suse.de" date="1431345600">- Update tcsh to patch level 6.18.05 - 20150510
  * fix reseting when interrupted inside an eval "eval sleep 10^C"
  (paulo.cesar.pereira.de.andrade)
  * rename handle_intr -&gt; handle_interrupt as originally intended.
  fix input tests that need stdin on a tty</changelog>
  <changelog author="werner@suse.de" date="1459339200">- Update to tcsh bug fix version V6.19
  * Mainly a bug fix release (after 3 years) with few new features:
    1. new cdtohome variable
    2. locking in history files
    3. history speedups.</changelog>
  <changelog author="schwab@suse.de" date="1459771200">- union-wait.patch: don't define BSDWAIT on glibc, future versions will
  remove support for union wait.</changelog>
  <changelog author="werner@suse.de" date="1471003200">- Add patch tcsh-6.19.00-history-file-locking-order.patch
  Make a copy of the file descriptor of the history file to be
  able not only to lock but also unlock this file (bsc#992577)</changelog>
  <changelog author="werner@suse.de" date="1480075200">- Update to tcsh bug fix version V6.20.00 - 20161124
  * Don't resize the screen if it did not change size.
  * restore file description when cleaning up after eval:
    repeat 99 time
  * PR/572: Fix $SHLVL issue when exec'ing subshells.
  * PR/403: Fix backquote expansion for multi-byte character sets.
  * Fix drawing issu with multi-line prompt (Kensuke Iwahashi/David Kaspar)
  * always send prusage to stdout.
  * PR/526: Fix double \\ printing from previous fix in history expansion.
  * Android updates from Corinna Vinschen
  * PR/526: Quote backslashes properly so they can be preserved in ``
    expansions
  * Fix memory leak for paraml
  * Add notempty and ask values for the noclobber setting (Martin Tournoij)
  * more correct $wordchars for vimode (Luke Mewburn)
  * expose VImode in $vimode (Luke Mewburn)
  * display what the compiled in editor is in bindkey -d (Luke Mewburn)
  * run-fg-editor improvements and documentation (Luke Mewburn)
  * Fix parsing of 'if (cond)then' (Fridolin Pokorny)
  * PR/437: Fix handling of invalid unicode characters.
  * PR/451: Fix error messages containing %c to be always '%c'
- Rename patch tcsh-6.18.03.dif which becomes tcsh-6.20.00.dif now
- Drop patch union-wait.patch as now upstream
- Modify patches
    tcsh-6.15.00-pipe.dif
    tcsh-6.17.06-dspmbyte.dif
    tcsh-6.18.03-colorls.dif
    tcsh-6.18.03-history-file-locking.patch
    tcsh-6.19.00-history-file-locking-order.patch</changelog>
  <changelog author="werner@suse.de" date="1480593600">- Add patch tcsh-6.20-rmstar.patch from mailing list to restore
  the correct behaviour of `rm *' if rmstar is set</changelog>
  <changelog author="werner@suse.de" date="1481112000">- Add patch tcsh-6.20-ptr-update.patch from mailing list to correct
  updating pointers to a reallocated buffer of of linked list elements
- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch tcsh-6.20.00-8bit-cmdkeys.patch
  Do not convert current used control bytes into wide characters
- Extend bindkey.tcsh with 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1497614400">- Add patch tcsh-closem.patch to fix a long standing misbehaviour
  of upstram tcsh whic his that it close sockets which do not
  belong to it (bsc#1028864)</changelog>
  <changelog author="werner@suse.de" date="1500465600">- Add patch tcsh-6.20.00-avoid-dotlock-for-fcntl.patch as we are
  using fcntl's F_SETLKW patches for locking therefore avoid dot
  file locking without holding a file descriptor as otherwise we
  migth not be able to open the history file after a crash or if
  a killall had been used during reboot.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1554811200">- Add patch tcsh-6.20.00-postcmd.patch as workaround for bsc#1129112
- Modify tcsh-6.20.00.dif to fix sed syntax for test case lexical.at</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1557403200">- Modify patch tcsh-6.20.00-postcmd.patch to switch over to the
  fix in latest tcsh-6.21.00  (bsc#1129112)</changelog>
</package>
<package pkgid="40a6a296d558288746de99f161ee554642abb3413a685bb88895b1b07d975c42" name="tcsh" arch="src">
  <version epoch="0" ver="6.20.00" rel="lp151.3.3.1"/>
  <changelog author="werner@suse.de" date="1375790400">- Update to tcsh bug fix version V6.18.01
- Remove patch tcsh-6.18.01.patch as not required anymore
- Add patch tcsh-6.18.01-metakey.patch to make meta key work</changelog>
  <changelog author="werner@suse.de" date="1381838400">- Add patch tcsh-6.18.01-history-merge.dif which is a backport of
  the patch from Stanislav Tokos (bnc#844752)</changelog>
  <changelog author="werner@suse.de" date="1421150400">- Add patch tcsh-6.18.00-history-file-locking.patch for bsc#901076
  Cluster switch does not started completely packages on other node
- Modified patch  tcsh-6.18.01-history-merge.dif to fit with former</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup with spec-cleaner to order header data
- Use %lang_package macro to remove redundant stuff
- Drop unused patch tcsh-6.15.00-blanks.dif
- Run make with more threads
- Move the commented check to check section to silence rpmlint</changelog>
  <changelog author="werner@suse.de" date="1422619200">- Enable tcsh checks but be aware that this can not be done in parallel
- Backup tcsh-6.15.00-blanks.dif away before update a working copy</changelog>
  <changelog author="werner@suse.de" date="1430740800">- Update tcsh to patch level 6.18.03 - 20150503
  * PR/437: Nakajima Akira: Fix segmentation fault reading input files
  * PR/291: Print job status messages to stderr.
  * Fridolin Pokorny NUL in `` does not mean EOF.
  * Pavel Raiskup fix hang with:
    while (1)
    ( date &amp; ; wait )
    end
  * Add cdtohome special variable (Martin Tournoij)
  * Fix root prompt char for windows (Corinna Vinschen)
  * For "next" completion matches only consider exact matches of the
    previous word (Jamie Landeg-Jones)
  * Fix echo "\1" for echo_style=both where the first character was
    not processed properly (Gary Duzan)
- Remove patches now upstream
  * tcsh-6.18.01-blk_buf.patch
  * tcsh-6.18.01-metakey.patch
- Rename patches
  tcsh-6.17.03-colorls.dif becomes tcsh-6.18.03-colorls.dif
  tcsh-6.17.10-catalogs.dif becomes tcsh-6.18.03-catalogs.dif
  tcsh-6.18.00-history-file-locking.patch becomes tcsh-6.18.03-history-file-locking.patch
  tcsh-6.18.01-history-merge.dif becomes tcsh-6.18.03-history-merge.dif
  tcsh-6.18.00.dif becomes tcsh-6.18.03.dif</changelog>
  <changelog author="werner@suse.de" date="1430827200">- Update tcsh to patch level 6.18.04 - 20150504
  * revert fix echo "\1", it is incorrect.
  * revert fix to PR/437, breaks short strings.</changelog>
  <changelog author="werner@suse.de" date="1431345600">- Update tcsh to patch level 6.18.05 - 20150510
  * fix reseting when interrupted inside an eval "eval sleep 10^C"
  (paulo.cesar.pereira.de.andrade)
  * rename handle_intr -&gt; handle_interrupt as originally intended.
  fix input tests that need stdin on a tty</changelog>
  <changelog author="werner@suse.de" date="1459339200">- Update to tcsh bug fix version V6.19
  * Mainly a bug fix release (after 3 years) with few new features:
    1. new cdtohome variable
    2. locking in history files
    3. history speedups.</changelog>
  <changelog author="schwab@suse.de" date="1459771200">- union-wait.patch: don't define BSDWAIT on glibc, future versions will
  remove support for union wait.</changelog>
  <changelog author="werner@suse.de" date="1471003200">- Add patch tcsh-6.19.00-history-file-locking-order.patch
  Make a copy of the file descriptor of the history file to be
  able not only to lock but also unlock this file (bsc#992577)</changelog>
  <changelog author="werner@suse.de" date="1480075200">- Update to tcsh bug fix version V6.20.00 - 20161124
  * Don't resize the screen if it did not change size.
  * restore file description when cleaning up after eval:
    repeat 99 time
  * PR/572: Fix $SHLVL issue when exec'ing subshells.
  * PR/403: Fix backquote expansion for multi-byte character sets.
  * Fix drawing issu with multi-line prompt (Kensuke Iwahashi/David Kaspar)
  * always send prusage to stdout.
  * PR/526: Fix double \\ printing from previous fix in history expansion.
  * Android updates from Corinna Vinschen
  * PR/526: Quote backslashes properly so they can be preserved in ``
    expansions
  * Fix memory leak for paraml
  * Add notempty and ask values for the noclobber setting (Martin Tournoij)
  * more correct $wordchars for vimode (Luke Mewburn)
  * expose VImode in $vimode (Luke Mewburn)
  * display what the compiled in editor is in bindkey -d (Luke Mewburn)
  * run-fg-editor improvements and documentation (Luke Mewburn)
  * Fix parsing of 'if (cond)then' (Fridolin Pokorny)
  * PR/437: Fix handling of invalid unicode characters.
  * PR/451: Fix error messages containing %c to be always '%c'
- Rename patch tcsh-6.18.03.dif which becomes tcsh-6.20.00.dif now
- Drop patch union-wait.patch as now upstream
- Modify patches
    tcsh-6.15.00-pipe.dif
    tcsh-6.17.06-dspmbyte.dif
    tcsh-6.18.03-colorls.dif
    tcsh-6.18.03-history-file-locking.patch
    tcsh-6.19.00-history-file-locking-order.patch</changelog>
  <changelog author="werner@suse.de" date="1480593600">- Add patch tcsh-6.20-rmstar.patch from mailing list to restore
  the correct behaviour of `rm *' if rmstar is set</changelog>
  <changelog author="werner@suse.de" date="1481112000">- Add patch tcsh-6.20-ptr-update.patch from mailing list to correct
  updating pointers to a reallocated buffer of of linked list elements
- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch tcsh-6.20.00-8bit-cmdkeys.patch
  Do not convert current used control bytes into wide characters
- Extend bindkey.tcsh with 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1497614400">- Add patch tcsh-closem.patch to fix a long standing misbehaviour
  of upstram tcsh whic his that it close sockets which do not
  belong to it (bsc#1028864)</changelog>
  <changelog author="werner@suse.de" date="1500465600">- Add patch tcsh-6.20.00-avoid-dotlock-for-fcntl.patch as we are
  using fcntl's F_SETLKW patches for locking therefore avoid dot
  file locking without holding a file descriptor as otherwise we
  migth not be able to open the history file after a crash or if
  a killall had been used during reboot.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1554811200">- Add patch tcsh-6.20.00-postcmd.patch as workaround for bsc#1129112
- Modify tcsh-6.20.00.dif to fix sed syntax for test case lexical.at</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1557403200">- Modify patch tcsh-6.20.00-postcmd.patch to switch over to the
  fix in latest tcsh-6.21.00  (bsc#1129112)</changelog>
</package>
<package pkgid="3039fe88d2fb67043378e3c0399abf75e429113f8260cd478db0f38e2fea2358" name="tcsh" arch="x86_64">
  <version epoch="0" ver="6.20.00" rel="lp151.3.3.1"/>
  <changelog author="werner@suse.de" date="1421150400">- Add patch tcsh-6.18.00-history-file-locking.patch for bsc#901076
  Cluster switch does not started completely packages on other node
- Modified patch  tcsh-6.18.01-history-merge.dif to fit with former</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup with spec-cleaner to order header data
- Use %lang_package macro to remove redundant stuff
- Drop unused patch tcsh-6.15.00-blanks.dif
- Run make with more threads
- Move the commented check to check section to silence rpmlint</changelog>
  <changelog author="werner@suse.de" date="1422619200">- Enable tcsh checks but be aware that this can not be done in parallel
- Backup tcsh-6.15.00-blanks.dif away before update a working copy</changelog>
  <changelog author="werner@suse.de" date="1430740800">- Update tcsh to patch level 6.18.03 - 20150503
  * PR/437: Nakajima Akira: Fix segmentation fault reading input files
  * PR/291: Print job status messages to stderr.
  * Fridolin Pokorny NUL in `` does not mean EOF.
  * Pavel Raiskup fix hang with:
    while (1)
    ( date &amp; ; wait )
    end
  * Add cdtohome special variable (Martin Tournoij)
  * Fix root prompt char for windows (Corinna Vinschen)
  * For "next" completion matches only consider exact matches of the
    previous word (Jamie Landeg-Jones)
  * Fix echo "\1" for echo_style=both where the first character was
    not processed properly (Gary Duzan)
- Remove patches now upstream
  * tcsh-6.18.01-blk_buf.patch
  * tcsh-6.18.01-metakey.patch
- Rename patches
  tcsh-6.17.03-colorls.dif becomes tcsh-6.18.03-colorls.dif
  tcsh-6.17.10-catalogs.dif becomes tcsh-6.18.03-catalogs.dif
  tcsh-6.18.00-history-file-locking.patch becomes tcsh-6.18.03-history-file-locking.patch
  tcsh-6.18.01-history-merge.dif becomes tcsh-6.18.03-history-merge.dif
  tcsh-6.18.00.dif becomes tcsh-6.18.03.dif</changelog>
  <changelog author="werner@suse.de" date="1430827200">- Update tcsh to patch level 6.18.04 - 20150504
  * revert fix echo "\1", it is incorrect.
  * revert fix to PR/437, breaks short strings.</changelog>
  <changelog author="werner@suse.de" date="1431345600">- Update tcsh to patch level 6.18.05 - 20150510
  * fix reseting when interrupted inside an eval "eval sleep 10^C"
  (paulo.cesar.pereira.de.andrade)
  * rename handle_intr -&gt; handle_interrupt as originally intended.
  fix input tests that need stdin on a tty</changelog>
  <changelog author="werner@suse.de" date="1459339200">- Update to tcsh bug fix version V6.19
  * Mainly a bug fix release (after 3 years) with few new features:
    1. new cdtohome variable
    2. locking in history files
    3. history speedups.</changelog>
  <changelog author="schwab@suse.de" date="1459771200">- union-wait.patch: don't define BSDWAIT on glibc, future versions will
  remove support for union wait.</changelog>
  <changelog author="werner@suse.de" date="1471003200">- Add patch tcsh-6.19.00-history-file-locking-order.patch
  Make a copy of the file descriptor of the history file to be
  able not only to lock but also unlock this file (bsc#992577)</changelog>
  <changelog author="werner@suse.de" date="1480075200">- Update to tcsh bug fix version V6.20.00 - 20161124
  * Don't resize the screen if it did not change size.
  * restore file description when cleaning up after eval:
    repeat 99 time
  * PR/572: Fix $SHLVL issue when exec'ing subshells.
  * PR/403: Fix backquote expansion for multi-byte character sets.
  * Fix drawing issu with multi-line prompt (Kensuke Iwahashi/David Kaspar)
  * always send prusage to stdout.
  * PR/526: Fix double \\ printing from previous fix in history expansion.
  * Android updates from Corinna Vinschen
  * PR/526: Quote backslashes properly so they can be preserved in ``
    expansions
  * Fix memory leak for paraml
  * Add notempty and ask values for the noclobber setting (Martin Tournoij)
  * more correct $wordchars for vimode (Luke Mewburn)
  * expose VImode in $vimode (Luke Mewburn)
  * display what the compiled in editor is in bindkey -d (Luke Mewburn)
  * run-fg-editor improvements and documentation (Luke Mewburn)
  * Fix parsing of 'if (cond)then' (Fridolin Pokorny)
  * PR/437: Fix handling of invalid unicode characters.
  * PR/451: Fix error messages containing %c to be always '%c'
- Rename patch tcsh-6.18.03.dif which becomes tcsh-6.20.00.dif now
- Drop patch union-wait.patch as now upstream
- Modify patches
    tcsh-6.15.00-pipe.dif
    tcsh-6.17.06-dspmbyte.dif
    tcsh-6.18.03-colorls.dif
    tcsh-6.18.03-history-file-locking.patch
    tcsh-6.19.00-history-file-locking-order.patch</changelog>
  <changelog author="werner@suse.de" date="1480593600">- Add patch tcsh-6.20-rmstar.patch from mailing list to restore
  the correct behaviour of `rm *' if rmstar is set</changelog>
  <changelog author="werner@suse.de" date="1481112000">- Add patch tcsh-6.20-ptr-update.patch from mailing list to correct
  updating pointers to a reallocated buffer of of linked list elements
- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch tcsh-6.20.00-8bit-cmdkeys.patch
  Do not convert current used control bytes into wide characters
- Extend bindkey.tcsh with 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1497614400">- Add patch tcsh-closem.patch to fix a long standing misbehaviour
  of upstram tcsh whic his that it close sockets which do not
  belong to it (bsc#1028864)</changelog>
  <changelog author="werner@suse.de" date="1500465600">- Add patch tcsh-6.20.00-avoid-dotlock-for-fcntl.patch as we are
  using fcntl's F_SETLKW patches for locking therefore avoid dot
  file locking without holding a file descriptor as otherwise we
  migth not be able to open the history file after a crash or if
  a killall had been used during reboot.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1554811200">- Add patch tcsh-6.20.00-postcmd.patch as workaround for bsc#1129112
- Modify tcsh-6.20.00.dif to fix sed syntax for test case lexical.at</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1557403200">- Modify patch tcsh-6.20.00-postcmd.patch to switch over to the
  fix in latest tcsh-6.21.00  (bsc#1129112)</changelog>
</package>
<package pkgid="9029549c59dc4af5009c3d0cbea862f2a907411c5664f6fe7ef767a7394e69e3" name="tcsh-lang" arch="noarch">
  <version epoch="0" ver="6.20.00" rel="lp151.3.3.1"/>
  <changelog author="werner@suse.de" date="1421150400">- Add patch tcsh-6.18.00-history-file-locking.patch for bsc#901076
  Cluster switch does not started completely packages on other node
- Modified patch  tcsh-6.18.01-history-merge.dif to fit with former</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup with spec-cleaner to order header data
- Use %lang_package macro to remove redundant stuff
- Drop unused patch tcsh-6.15.00-blanks.dif
- Run make with more threads
- Move the commented check to check section to silence rpmlint</changelog>
  <changelog author="werner@suse.de" date="1422619200">- Enable tcsh checks but be aware that this can not be done in parallel
- Backup tcsh-6.15.00-blanks.dif away before update a working copy</changelog>
  <changelog author="werner@suse.de" date="1430740800">- Update tcsh to patch level 6.18.03 - 20150503
  * PR/437: Nakajima Akira: Fix segmentation fault reading input files
  * PR/291: Print job status messages to stderr.
  * Fridolin Pokorny NUL in `` does not mean EOF.
  * Pavel Raiskup fix hang with:
    while (1)
    ( date &amp; ; wait )
    end
  * Add cdtohome special variable (Martin Tournoij)
  * Fix root prompt char for windows (Corinna Vinschen)
  * For "next" completion matches only consider exact matches of the
    previous word (Jamie Landeg-Jones)
  * Fix echo "\1" for echo_style=both where the first character was
    not processed properly (Gary Duzan)
- Remove patches now upstream
  * tcsh-6.18.01-blk_buf.patch
  * tcsh-6.18.01-metakey.patch
- Rename patches
  tcsh-6.17.03-colorls.dif becomes tcsh-6.18.03-colorls.dif
  tcsh-6.17.10-catalogs.dif becomes tcsh-6.18.03-catalogs.dif
  tcsh-6.18.00-history-file-locking.patch becomes tcsh-6.18.03-history-file-locking.patch
  tcsh-6.18.01-history-merge.dif becomes tcsh-6.18.03-history-merge.dif
  tcsh-6.18.00.dif becomes tcsh-6.18.03.dif</changelog>
  <changelog author="werner@suse.de" date="1430827200">- Update tcsh to patch level 6.18.04 - 20150504
  * revert fix echo "\1", it is incorrect.
  * revert fix to PR/437, breaks short strings.</changelog>
  <changelog author="werner@suse.de" date="1431345600">- Update tcsh to patch level 6.18.05 - 20150510
  * fix reseting when interrupted inside an eval "eval sleep 10^C"
  (paulo.cesar.pereira.de.andrade)
  * rename handle_intr -&gt; handle_interrupt as originally intended.
  fix input tests that need stdin on a tty</changelog>
  <changelog author="werner@suse.de" date="1459339200">- Update to tcsh bug fix version V6.19
  * Mainly a bug fix release (after 3 years) with few new features:
    1. new cdtohome variable
    2. locking in history files
    3. history speedups.</changelog>
  <changelog author="schwab@suse.de" date="1459771200">- union-wait.patch: don't define BSDWAIT on glibc, future versions will
  remove support for union wait.</changelog>
  <changelog author="werner@suse.de" date="1471003200">- Add patch tcsh-6.19.00-history-file-locking-order.patch
  Make a copy of the file descriptor of the history file to be
  able not only to lock but also unlock this file (bsc#992577)</changelog>
  <changelog author="werner@suse.de" date="1480075200">- Update to tcsh bug fix version V6.20.00 - 20161124
  * Don't resize the screen if it did not change size.
  * restore file description when cleaning up after eval:
    repeat 99 time
  * PR/572: Fix $SHLVL issue when exec'ing subshells.
  * PR/403: Fix backquote expansion for multi-byte character sets.
  * Fix drawing issu with multi-line prompt (Kensuke Iwahashi/David Kaspar)
  * always send prusage to stdout.
  * PR/526: Fix double \\ printing from previous fix in history expansion.
  * Android updates from Corinna Vinschen
  * PR/526: Quote backslashes properly so they can be preserved in ``
    expansions
  * Fix memory leak for paraml
  * Add notempty and ask values for the noclobber setting (Martin Tournoij)
  * more correct $wordchars for vimode (Luke Mewburn)
  * expose VImode in $vimode (Luke Mewburn)
  * display what the compiled in editor is in bindkey -d (Luke Mewburn)
  * run-fg-editor improvements and documentation (Luke Mewburn)
  * Fix parsing of 'if (cond)then' (Fridolin Pokorny)
  * PR/437: Fix handling of invalid unicode characters.
  * PR/451: Fix error messages containing %c to be always '%c'
- Rename patch tcsh-6.18.03.dif which becomes tcsh-6.20.00.dif now
- Drop patch union-wait.patch as now upstream
- Modify patches
    tcsh-6.15.00-pipe.dif
    tcsh-6.17.06-dspmbyte.dif
    tcsh-6.18.03-colorls.dif
    tcsh-6.18.03-history-file-locking.patch
    tcsh-6.19.00-history-file-locking-order.patch</changelog>
  <changelog author="werner@suse.de" date="1480593600">- Add patch tcsh-6.20-rmstar.patch from mailing list to restore
  the correct behaviour of `rm *' if rmstar is set</changelog>
  <changelog author="werner@suse.de" date="1481112000">- Add patch tcsh-6.20-ptr-update.patch from mailing list to correct
  updating pointers to a reallocated buffer of of linked list elements
- Remove --hash-size options as there is no any change in the final
  binary nor library anymore</changelog>
  <changelog author="werner@suse.de" date="1484827200">- Remove -L option on screen call dues API change, now we depend
  on environment variables only.</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Add patch tcsh-6.20.00-8bit-cmdkeys.patch
  Do not convert current used control bytes into wide characters
- Extend bindkey.tcsh with 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1497614400">- Add patch tcsh-closem.patch to fix a long standing misbehaviour
  of upstram tcsh whic his that it close sockets which do not
  belong to it (bsc#1028864)</changelog>
  <changelog author="werner@suse.de" date="1500465600">- Add patch tcsh-6.20.00-avoid-dotlock-for-fcntl.patch as we are
  using fcntl's F_SETLKW patches for locking therefore avoid dot
  file locking without holding a file descriptor as otherwise we
  migth not be able to open the history file after a crash or if
  a killall had been used during reboot.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1554811200">- Add patch tcsh-6.20.00-postcmd.patch as workaround for bsc#1129112
- Modify tcsh-6.20.00.dif to fix sed syntax for test case lexical.at</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1557403200">- Modify patch tcsh-6.20.00-postcmd.patch to switch over to the
  fix in latest tcsh-6.21.00  (bsc#1129112)</changelog>
</package>
<package pkgid="661dcf97147bac05498bffcf0cd59f33d044994d549416f1bcf5203067e76e9f" name="teeworlds" arch="src">
  <version epoch="0" ver="0.7.3.1" rel="lp151.2.3.1"/>
  <changelog author="prusnak@suse.cz" date="1220270400">- updated to 0.4.3
  * Auto team balance
  * Anti-spam fixes
  * Fixed editor crash on windows when saving
  * Added clear collision to the editor
  * Fixed issue with cursor being hidden on some maps
  * New version notifier
  * Silent mode for windows
  * F10 for screenshots now works in the editor</changelog>
  <changelog author="cmorve69@yahoo.es" date="1232020800">- updated to 0.5.0
  * General
  - Demo recording and playback
  - Support for up to 16 players
  - Network and bandwidth reduction fixes
  - Some changes to better acommodate unofficial mods. Note: Mods are still
    unsupported.
  - Improved server browser: extended server info, better filtering, support
    for favorite servers
  - Server browser now has an option to filter out modded or tweaked servers,
    showing only "pure" servers. This option is enabled by default.
  - Ban support
  - Voting is now fully implemented. Admins decide what server setting can be
    voted on.
  - Support for death and non-hookable tiles
  - Move from glfw+portaudio to SDL
  - Game balance fixes
  * Maps and tilesets
  - Map pack has been updated, including six new maps (3x DM, 3x CTF)
  - Tilesets have been updated, jungle tileset added. Check your maps!
  - Non-hookable tiles (represented by new graphics)
  - Death tiles</changelog>
  <changelog author="prusnak@suse.cz" date="1233230400">- updated to 0.5.1
  * Hook sound fixed
  * Prediction and game timer fixed so the game should be a lot smoother now
  * Server filter that filters out non-standard maps
  * General improvements of the server browser
  * VSync fixed
  * Increased voting time from 10 seconds to 25
  * Scoreboard now works with 16 players
  * Fixed so you can't by-pass the server password
  * Tab completion and command help in the console
  * More various small fixes</changelog>
  <changelog author="prusnak@suse.cz" date="1255348800">- moved data to /usr/share and binaries to /usr/bin</changelog>
  <changelog author="adam@mizerski.pl" date="1267704000">- Updated to 0.5.2
  * Fixed server flood crash
  * A bunch of smaller fixes
  * Fixed a couple of compiler warnings</changelog>
  <changelog author="adam@mizerski.pl" date="1267704001">- Fixed no-return-in-nonvoid-function src/tools/crapnet.cpp:203
- Tagged paches</changelog>
  <changelog author="PVince81@opensuse.org" date="1302955200">- Updated to 0.6.0</changelog>
  <changelog author="PVince81@opensuse.org" date="1312718400">- Updated to 0.6.1</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1358683200">- zlib-devel and freefonts2-devel are not an auto BuildRequiment
  any more in openSUSE &gt; 12.1
- Cleaned the spec file up</changelog>
  <changelog author="mailaender@opensuse.org" date="1358683201">- add license for assets
- SPDX license tags</changelog>
  <changelog author="mailaender@opensuse.org" date="1367668800">- Update to 0.6.2
- Switch to https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1422100800">- Update to 0.6.3
  * Fix CVE-2014-9351 in all 0.6.x servers.
  * Fix server crash in the console code.
  * Fix master server lookup for servers.
  * Fix scripts/make_release.py script.
  * Fix client crash when opening a map with an invalid version.</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Added fix-server-vulnerability.patch
- Replaced teeworlds.png with bundled icon.</changelog>
  <changelog author="mailaender@opensuse.org" date="1469880000">- unbundle bam
- build with system libraries
- submitted the .desktop file upstream
- add an appdata.xml file (submitted for upstream inclusion)
- add round.patch to fix the build with C++ 6</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Update descriptions</changelog>
  <changelog author="rpm@fthiessen.de" date="1478347201">- Fixed line endings of readme and license</changelog>
  <changelog author="mailaender@opensuse.org" date="1479556800">- Update to version 0.6.4
  * Fix attacker controlled memory-writes and possibly arbitrary code execution security vulnerability in the client.
  * Fix a read of uninitialized memory that is sent over the network, from the server.
  * Fix decoding of overlong UTF-8 sequences to non-invalid code points, leading to possible duplicate names.
  * Drop connected packets that come from a formerly connected server in the client.
  * Use a different port for connless messages, increasing the difficulty of successful IP spoofing.
  * Make spoofing of server info packets harder.
  * Fix spoofing for vital chunks, and require most chunks to be vital.
  * Sort by player count by default, instead of server name.
  * Add a cooldown on unpause.
- Drop patches applied upstream
  * fix-server-vulnerability.patch
  * round.patch
- Unbundle DejaVu font</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726400">- Use convert -strip to not have timestamps in png files
  to make build more reproducible</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1523880000">- Allow build with bam &gt;= 0.5.0.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562932800">- Update to version 0.7.3.1
  * Fix the following security issues
    + CVE-2019-10879 (bnc#1131729)
    + CVE-2019-10878
    + CVE-2019-10877
    + CVE-2018-18541 (bnc#1112910)
  * fixed using correct array measurements when placing egg doodads
  * fixed demo recorder downloaded maps using the sha256 hash
  * show correct game release version in the start menu and console
  * Fix platform-specific client libraries for Linux
- Changes since 0.7.3
- Use cmake instead of the bam build-system
- Drop not longer needed patches:
  * bam-0.5.patch
  * desktop.patch
  * teeworlds-0.6.0-datadir.patch
  * teeworlds-0.6.4-extlibs-optflags.patch
- Changes since 0.7.2
  * advanced scoreboard with game statistics
  * joystick support (experimental!)
  * copy paste (one-way)
  * bot cosmetics (a visual difference between players and NPCs)
  * chat commands (type / in chat)
  * players can change skin without leaving the server (again)
  * live automapper and complete rules for 0.7 tilesets
  * audio toggling HUD
  * an Easter surprise...
- Changes since 0.7.1
  Features:
  * Christmas special update.
  * Colorful gametype and level icons in the browser instead of
    grayscale.
  * Add an option to use raw mouse inputs, revert to (0.6) relative
    mode by default.
  * Demo list marker indicator.
  * Restore ingame Player and Tee menus, add a warning that a
    reconnect is needed.
  * Emotes can now be cancelled by releasing the mouse in the
    middle of the circle.
  * Improve add friend text.
  * Add a confirmation for removing a filter
  * Add a "click a player to follow" hint
  * Also hint players which key they should press to set themselves
    ready.
  Fixes:
  * Fixed textures for older graphic cards
  * Cancel whisper when target leaves
  * Fixed server browser entry text color &amp; close region
  * Adjust chat messages to not display UID when option is turned off
  * Fix empty vote when joining a server
  * Broadcast: parse new line character
  * Fix general menu NumOptions
  * Fix failure to open configs in absolute paths since 0.7
  * Fix MOTD not always displayed
  * Adjust volume label size
  * Fix invalid serverinfo
  * Fix red UID background in DM
  * Fix sorting to sort by real players/clients
  * Fix can't remove clan friend
  * Fix too small 0.7 server popups
  * Fix server browser flickering
  * Fix change_map command not always changing map
  * Fix round score reset
  * Properly blend UID in chat
  * Add difficulty info to the ingame menus
- Changes since 0.7.0
  General
  * new gametypes: "last man standing" (LMS) and "last team standing"
    (LTS). survive by your own or as a team with limited weaponry
  * 64 players support. official gametypes are still restricted to 16
    players maximum but allow more spectators
  * new skin system. build your own skins based on a variety of
    provided parts
  * enhanced security. all communications require a handshake and use
    a token to counter spoofing and reflection attacks
  * new maps: ctf8, dm3, lms1. Click to discover them!
  Client
  * animated background menu map: jungle, heavens (day/night themes,
    customisable in the map editor)
  * new design for the menus: added start menus, reworked server
    browser, settings
  * customisable gametype icons (browser). make your own!
  * chat overhaul, whispers (private messages)
  * composed binds (ctrl+, shift+, alt+)
  * scoreboard remodelled, now shows kills/deaths
  * demo markers
  * master server list cache (in case the masters are unreachable)
  * input separated from rendering (optimisation)
  * upgrade to SDL2. support for multiple monitors, non-english
    keyboards, and more
  * 10 new languages
  Server
  * broadcasts overhaul, optional colours support
  * ready system, for competitive settings
  * server difficulty setting (casual, competitive, normal), shown in
    the browser
  * spectator mode improvements: follow flags, click on players
  * bot flags for modified servers: indicate NPCs, can be filtered out
    in the server browser
  * Graphics
  * sharper graphics all around (no more tileset_borderfix and dilate)
  * refreshed the HUD, ninja cooldown, new mouse cursor
  * mapres update (higher resolution, fixes...)</changelog>
</package>
<package pkgid="93d17ce68cc3f27a9723fde3b0c885ee5fc0d2a1f656ea5ad2c15e505764219d" name="teeworlds" arch="x86_64">
  <version epoch="0" ver="0.7.3.1" rel="lp151.2.3.1"/>
  <changelog author="mailaender@opensuse.org" date="1367668800">- Update to 0.6.2
- Switch to https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1422100800">- Update to 0.6.3
  * Fix CVE-2014-9351 in all 0.6.x servers.
  * Fix server crash in the console code.
  * Fix master server lookup for servers.
  * Fix scripts/make_release.py script.
  * Fix client crash when opening a map with an invalid version.</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Added fix-server-vulnerability.patch
- Replaced teeworlds.png with bundled icon.</changelog>
  <changelog author="mailaender@opensuse.org" date="1469880000">- unbundle bam
- build with system libraries
- submitted the .desktop file upstream
- add an appdata.xml file (submitted for upstream inclusion)
- add round.patch to fix the build with C++ 6</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Update descriptions</changelog>
  <changelog author="rpm@fthiessen.de" date="1478347201">- Fixed line endings of readme and license</changelog>
  <changelog author="mailaender@opensuse.org" date="1479556800">- Update to version 0.6.4
  * Fix attacker controlled memory-writes and possibly arbitrary code execution security vulnerability in the client.
  * Fix a read of uninitialized memory that is sent over the network, from the server.
  * Fix decoding of overlong UTF-8 sequences to non-invalid code points, leading to possible duplicate names.
  * Drop connected packets that come from a formerly connected server in the client.
  * Use a different port for connless messages, increasing the difficulty of successful IP spoofing.
  * Make spoofing of server info packets harder.
  * Fix spoofing for vital chunks, and require most chunks to be vital.
  * Sort by player count by default, instead of server name.
  * Add a cooldown on unpause.
- Drop patches applied upstream
  * fix-server-vulnerability.patch
  * round.patch
- Unbundle DejaVu font</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726400">- Use convert -strip to not have timestamps in png files
  to make build more reproducible</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1523880000">- Allow build with bam &gt;= 0.5.0.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1562932800">- Update to version 0.7.3.1
  * Fix the following security issues
    + CVE-2019-10879 (bnc#1131729)
    + CVE-2019-10878
    + CVE-2019-10877
    + CVE-2018-18541 (bnc#1112910)
  * fixed using correct array measurements when placing egg doodads
  * fixed demo recorder downloaded maps using the sha256 hash
  * show correct game release version in the start menu and console
  * Fix platform-specific client libraries for Linux
- Changes since 0.7.3
- Use cmake instead of the bam build-system
- Drop not longer needed patches:
  * bam-0.5.patch
  * desktop.patch
  * teeworlds-0.6.0-datadir.patch
  * teeworlds-0.6.4-extlibs-optflags.patch
- Changes since 0.7.2
  * advanced scoreboard with game statistics
  * joystick support (experimental!)
  * copy paste (one-way)
  * bot cosmetics (a visual difference between players and NPCs)
  * chat commands (type / in chat)
  * players can change skin without leaving the server (again)
  * live automapper and complete rules for 0.7 tilesets
  * audio toggling HUD
  * an Easter surprise...
- Changes since 0.7.1
  Features:
  * Christmas special update.
  * Colorful gametype and level icons in the browser instead of
    grayscale.
  * Add an option to use raw mouse inputs, revert to (0.6) relative
    mode by default.
  * Demo list marker indicator.
  * Restore ingame Player and Tee menus, add a warning that a
    reconnect is needed.
  * Emotes can now be cancelled by releasing the mouse in the
    middle of the circle.
  * Improve add friend text.
  * Add a confirmation for removing a filter
  * Add a "click a player to follow" hint
  * Also hint players which key they should press to set themselves
    ready.
  Fixes:
  * Fixed textures for older graphic cards
  * Cancel whisper when target leaves
  * Fixed server browser entry text color &amp; close region
  * Adjust chat messages to not display UID when option is turned off
  * Fix empty vote when joining a server
  * Broadcast: parse new line character
  * Fix general menu NumOptions
  * Fix failure to open configs in absolute paths since 0.7
  * Fix MOTD not always displayed
  * Adjust volume label size
  * Fix invalid serverinfo
  * Fix red UID background in DM
  * Fix sorting to sort by real players/clients
  * Fix can't remove clan friend
  * Fix too small 0.7 server popups
  * Fix server browser flickering
  * Fix change_map command not always changing map
  * Fix round score reset
  * Properly blend UID in chat
  * Add difficulty info to the ingame menus
- Changes since 0.7.0
  General
  * new gametypes: "last man standing" (LMS) and "last team standing"
    (LTS). survive by your own or as a team with limited weaponry
  * 64 players support. official gametypes are still restricted to 16
    players maximum but allow more spectators
  * new skin system. build your own skins based on a variety of
    provided parts
  * enhanced security. all communications require a handshake and use
    a token to counter spoofing and reflection attacks
  * new maps: ctf8, dm3, lms1. Click to discover them!
  Client
  * animated background menu map: jungle, heavens (day/night themes,
    customisable in the map editor)
  * new design for the menus: added start menus, reworked server
    browser, settings
  * customisable gametype icons (browser). make your own!
  * chat overhaul, whispers (private messages)
  * composed binds (ctrl+, shift+, alt+)
  * scoreboard remodelled, now shows kills/deaths
  * demo markers
  * master server list cache (in case the masters are unreachable)
  * input separated from rendering (optimisation)
  * upgrade to SDL2. support for multiple monitors, non-english
    keyboards, and more
  * 10 new languages
  Server
  * broadcasts overhaul, optional colours support
  * ready system, for competitive settings
  * server difficulty setting (casual, competitive, normal), shown in
    the browser
  * spectator mode improvements: follow flags, click on players
  * bot flags for modified servers: indicate NPCs, can be filtered out
    in the server browser
  * Graphics
  * sharper graphics all around (no more tileset_borderfix and dilate)
  * refreshed the HUD, ninja cooldown, new mouse cursor
  * mapres update (higher resolution, fixes...)</changelog>
</package>
<package pkgid="cc775882a112a6b7bd26445ec72421acfbce150ca326511759f0cc5aad892ec4" name="thunar" arch="src">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="925e34fb42cebf8d529bd6bb79059e105d52f8b4204cdb963c0330ac2f029baf" name="thunar" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="547aa323ee96bd4c50de3209139458b5873397d6364f27fae8aab34da277c2de" name="thunar-devel" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="6b4664ac5496cd0f243db96966f2a54a5327701828b806043c42027b8252edc1" name="thunar-lang" arch="noarch">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="9addc33d94865f3780833be4f068011df456b572d95cbf8c676c0b642e1f0421" name="timezone" arch="i586">
  <version epoch="0" ver="2019b" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
</package>
<package pkgid="a6ba33a515d9192264fb863781e7111017a3f4b254ca39cdcd3d2c6ea3ca9c59" name="timezone" arch="src">
  <version epoch="0" ver="2019b" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
</package>
<package pkgid="65fb76733271e19d184d8876e977ef5e3b4afff30c65c9b22b48448cc7fbcad1" name="timezone" arch="x86_64">
  <version epoch="0" ver="2019b" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
</package>
<package pkgid="f577edbac47a755054695405096e27405e80a28952c5ac929a1c033b3a2e67ba" name="timezone-java" arch="noarch">
  <version epoch="0" ver="2019b" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
</package>
<package pkgid="80c77f5a789ffc042a6be15a1cdba7c304b9dc4604d90c33ad2b2c5fad53bb96" name="timezone-java" arch="src">
  <version epoch="0" ver="2019b" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
</package>
<package pkgid="59e9457788a03c17570d1c85172a30522be2faee2684056d39d7392e8f944261" name="tomcat" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="acb1a46e99fec2ce28ee474a85a6bc5a377afdffd38715902c23ef726e5b8711" name="tomcat" arch="src">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="bf51bcbf6172d7d476c50a39a8193ea31e0fbb59038c1646c26be782a34e8526" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="82b1704c6538e2958b81bb578b3ab257ea8f4329cd1ad628e0d0bd024866c10d" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="791cdb1b95d400f5554cb5f9a4511ba5319cd249dfff8c9429b5f26a4860805e" name="tomcat-el-3_0-api" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="99a3dcdd9734c621ef9395153fed5cd5d1f635e2fbdc02960d2c010951412be2" name="tomcat-embed" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="9ffb8d7e8d6e99e89d653420d3a5527bec1d29655c85f9eec1c1a17240eb9b5e" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="2b23402e078fa646db12789e422747148347fecc92236d5571bb1d3718e4885c" name="tomcat-jsp-2_3-api" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="299fbd3d774316e4a85d0b304160477da9ee3d265a51c92226a07427c5b91908" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="21ca9cb24a8d35cdc581326ed011a2ef548e0ec5ca2c184ac1934d94ddb70962" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="8fb80a04ea7b588a84e1cace91822e2a3758d30a2a7cdc387bebfa1c6bbfd275" name="tomcat-servlet-4_0-api" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="c076ae6f7edadb68366cd2aa1ccfcae7618584256079437e15e9931cdc056b5b" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="9.0.21" rel="lp151.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="malbu@suse.com" date="1512129600">- Update to Tomcat 9.0.2:
  * Major update for tomcat8 from tomcat9
  * For full changelog please read upstream changes at:
    + http://tomcat.apache.org/tomcat-9.0-doc/changelog.html
  * Rename all tomcat-8.0-* files to tomcat-9.0-*
- Changed patches:
  * Deleted: tomcat-8.0-bootstrap-MANIFEST.MF.patch
  * Deleted: tomcat-8.0-sle.catalina.policy.patch
  * Deleted: tomcat-8.0-tomcat-users-webapp.patch
  * Deleted: tomcat-8.0.33-JDTCompiler-java.patch
  * Deleted: tomcat-8.0.44-javadoc.patch
  * Deleted: tomcat-8.0.9-property-build.windows.patch
  * Added: tomcat-9.0-JDTCompiler-java.patch
  * Added: tomcat-9.0-bootstrap-MANIFEST.MF.patch
  * Added: tomcat-9.0-javadoc.patch
  * Added: tomcat-9.0-sle.catalina.policy.patch
  * Added: tomcat-9.0-tomcat-users-webapp.patch
- Renamed subpackage tomcat-3_1-api to tomcat-4_0-api
  to reflect the new Servlet API version.
- Commented out JAVA_HOME in /etc/tomcat/tomcat.conf
- Added "tomcat-" prefix to lib symlinks under
  /usr/share/java to avoid file conflicts with servletapi5
  and geronimo-specs
- Fixed wrong %ghost file paths for alternatives symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1516190400">- Modified patch:
  * tomcat-9.0-javadoc.patch
    + Don't append to javadoc --add-modules since we are building
    with source=8
    + Avoid accessing Internet URLs from build environment</changelog>
  <changelog author="malbu@suse.de" date="1518782400">- Update to Tomcat 9.0.5. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.5_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1534420800">- Update to Tomcat 9.0.10. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.10_(markt)
- Fixed CVEs:
  - CVE-2018-1336 (bsc#1102400)
  - CVE-2018-8014 (bsc#1093697)
  - CVE-2018-8034 (bsc#1102379)
  - CVE-2018-8037 (bsc#1102410)
- Rebased patch tomcat-9.0-JDTCompiler-java.patch
- Added patch tomcat-9.0-disable-osgi-build.patch to disable adding
  OSGi metadata to JAR files</changelog>
  <changelog author="malbu@suse.com" date="1535284800">- Empty tomcat-9.0.sysconfig to avoid overwriting of customer's
  configuration during update (bsc#1067720)</changelog>
  <changelog author="ecsos@opensuse.org" date="1536667200">- Declare following files to config(noreplace) to prevent override
  access rights:
  - host-manager/META-INF/context.xml
  - manager/META-INF/context.xml</changelog>
  <changelog author="malbu@suse.com" date="1539864000">- Update to Tomcat 9.0.12. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)
- Fixed CVEs:
  - CVE-2018-11784 (bsc#1110850)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch
  - tomcat-9.0-sle.catalina.policy.patch
  - tomcat-9.0-tomcat-users-webapp.patch</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to Tomcat 9.0.13. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.13_(markt)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add pom files for tomcat-jdbc and tomcat-dbcp
- Add org.eclipse.jetty.orbit* aliases to correspondant artifacts</changelog>
  <changelog author="ecsos@opensuse.org" date="1546084800">- Update to Tomcat 9.0.14. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.14_(markt)</changelog>
  <changelog author="malbu@suse.com" date="1547208000">- Fix tomcat-digest classpath error (bsc#1120745)</changelog>
  <changelog author="malbu@suse.com" date="1547640000">- Fix tomcat-tool-wrapper classpath error (bsc#1120745)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548504000">- Clean up OSGi manifest injection
- Put embed maven metadata into embed subpackage
- Use the .mfiles* lists generated by %%add_maven_depmap macro</changelog>
  <changelog author="malbu@suse.com" date="1549281600">- Require Java 1.8 or later (bsc#1123407)</changelog>
  <changelog author="malbu@suse.com" date="1549368000">- Move webapps bundled with Tomcat to /usr/share/tomcat/tomcat-webapps
  (bsc#1092341). Affected packages:
  - tomcat-webapps
  - tomcat-admin-webapps
  - tomcat-docs-webapp
- Remove %doc directive from tomcat-docs-webapps files section so that
  zypper installs files even if rpm.install.excludedocs is set to yes.</changelog>
  <changelog author="malbu@suse.com" date="1550491200">- Set javac target to 1.8 when building docs samples and serverxmltool</changelog>
  <changelog author="malbu@suse.com" date="1550577600">- Don't overwrite changes made to server.xml contexts when updating
  bundled webapps.</changelog>
  <changelog author="Matei &lt;malbu@suse.com&gt;" date="1558440000">- Update to Tomcat 9.0.20. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.20_(markt)
  Notable packaging changes:
  - File /usr/share/java/tomcat/catalina-jmx-remote.jar was removed.
    The classes contained in this jar were merged into
    /usr/share/java/tomcat/catalina.jar.
- increase maximum number of threads and open files for tomcat (bsc#1111966)
- Fixed CVEs:
  - CVE-2019-0199 (bsc#1131055)
  - CVE-2019-0221 (bsc#1136085)
- Rebased patch:
  - tomcat-9.0-JDTCompiler-java.patch
  - tomcat-9.0-javadoc.patch</changelog>
  <changelog author="Matei Albu &lt;malbu@suse.com&gt;" date="1562241600">- Update to Tomcat 9.0.21. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.21_(markt)
  - Additional fix for CVE-2019-0199 addressing HTTP/2 connection window
    exhaustion on write (bsc#1139924)
- Rebased patches:
  - tomcat-9.0-disable-osgi-build.patch
  - tomcat-9.0-javadoc.patch</changelog>
</package>
<package pkgid="b1ace1b6991e22661ca2911397aa749d9fcc062554b78c922fc9791313aaac18" name="tracker" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="fc5b1490d3d698b8519b765c3fd428b88b1eb7071894af06087c2b1109e5034e" name="tracker" arch="src">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="10844aac93cb8f70e1d620966e0cd85d41195f358f21a7a4d8250b00786506f4" name="tracker" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="6821e82cfd38ebd31461132d8a05ad2aab243b40a4851d914e4bbdce640aa154" name="tracker-devel" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="fa61c20267f87c8103846df755448a50de983a0ad9510dff4d23f5e32be6d629" name="tracker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="d20d7919c49e25bb7d99ec0ae1e903ba87d422ccb169e5f6bd01d524d1fb39be" name="tracker-lang" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="7909bdfbe2caf65d23fcbd36417b3de2257a6fcd02915867948b450ca52f1223" name="transfig" arch="src">
  <version epoch="0" ver="3.2.6a" rel="lp151.4.3.1"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="werner@suse.de" date="1255089600">- Yet an other David Binderman bug (bnc#544938)</changelog>
  <changelog author="werner@suse.de" date="1260792000">- Update to transfig version 3.2.5a
  * 22 new arrowhead types
  * HTML map now produces reference to .png file instead of .gif
  * CreationDate in pictex output was either wrong or caused segfault
  * bugs fixed in SVG Driver:
  - blue component of shaded colors was always zero
  - line protruding beyond arrowhead on long arrows
  - wrong position of back arrowhead on double-headed arrows
  - fill patterns either missing or using incorrect linewidth
  - lowercase greek phi did not match its X11 counterpart
    from Martin Kroeker
  * dubious printf(j++,j++) in MP driver
  * missing #includes in MP driver
  * added !defined(__FreeBSD) to fig2dev.h def for sys_nerr and errno
    From Eric Scott
  * added -quiet options to giftopnm and ppmtopcs in reading GIF files
    From Eric Scott
  * Typo in LaTeX driver when generating arc-box. "iut" should be "put"
  * extraneous stroke:black in svg header removed along with stroke color
    for text, since the text fill color does the whole job
  * fig2dev produces more correctly structured PostScript.  Files get printed via
    CUPS on PostScript printers.  When viewing a .ps-file in gv you can go to the
    last page and back and to the last page again without getting PostScript errors.
    From Ronald Lembcke
  * Renamed the macro \SetFigFont to \SetFigFontNFSS if NFSS is #defined to alleviate
    some problems. From Roland Rosenfeld.
  * Grid in metric mode was incorrectly scaled
  * Removes any %EOF or %%EOF from imported EPS pictures before exporting.
    Also doesn't add %EOF when importing JPEG file now.
  * Missing call to get local time before converting to string in genpictex.c</changelog>
  <changelog author="werner@suse.de" date="1261051200">- Apply latest binderman patch</changelog>
  <changelog author="sndirsch@suse.de" date="1271678400">- fixed libpng buildrequires for openSUSE &gt;= 11.3</changelog>
  <changelog author="werner@suse.de" date="1271764800">- Add compatibility switch for libpng 1.4 or higher</changelog>
  <changelog author="werner@suse.de" date="1309262400">- Add URL due bnc#676463</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="werner@suse.de" date="1343131200">- Add missed fonts</changelog>
  <changelog author="werner@suse.de" date="1348833600">- Update to transfig version 3.2.5d
  * made PostScript output DSC 3.0 compliant to work with CUPS
    patch from Ian Dall (see https://bugzilla.redhat.com/558380)
  * Changed STOCK_LAST from 17 to 19 in fig2dev/dev/genemf.c
  * Questionable copy of one data type to another in genemf.c
  * Changed definition of command for short slanted lines in genlatex.c
  * Added check for existance of arrows in SVG line generator
  * Removed %%Page: directive from included JPEG files in PostScript/EPS output
  * bound.c was passing pointers to int instead of double to arc_tangent
  * put_msg function uses proper varargs now
  * Option for debug comments in GBX output is "yes" or "no", not "on" or "off"
  * Added help (-h)  info for GBX output
  * In version 1.4 of the PNG library dither was removed so fig2dev now uses
    quantize when importing PNG images with palettes
  * put_msg was declared twice (fig2dev/dev/genemf.c)
  * Added xlink namespace for images in SVG export
  * SVG output for imported images didn't form href link properly
  * New PSTricks driver from Gene Ressler (see man fig2dev for info)
  * transfig command was hardwired for "tex" for "make all" directive and
    removing files with "make clean" directive in creating Makefile
  * -a option added to PostScript and PICTeX languages to NOT include user's
    login name in output
  * Gerber (RS-247-X for CAD drawings for printed circuits) export language from Edward Gr</changelog>
  <changelog author="werner@suse.de" date="1360238400">- Add xfig.3.2.5b-mediaboxrealnb.dif to fix regarding pdf import,
  reported by Loic Le Guyader compare with Debian bug #530898</changelog>
  <changelog author="werner@suse.de" date="1360324800">- Use original patches from Debian</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
</package>
<package pkgid="44666f8b3d1a1f05ea7059099baecfce53a92f540c5bfea97111a78b7d543849" name="transfig" arch="x86_64">
  <version epoch="0" ver="3.2.6a" rel="lp151.4.3.1"/>
  <changelog author="werner@suse.de" date="1360238400">- Add xfig.3.2.5b-mediaboxrealnb.dif to fix regarding pdf import,
  reported by Loic Le Guyader compare with Debian bug #530898</changelog>
  <changelog author="werner@suse.de" date="1360324800">- Use original patches from Debian</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
</package>
<package pkgid="b3cc2946159cbc63e8dc46c7231d56c6a1e490c46c016e80490566d2d3f9471b" name="typelib-1_0-EvinceDocument-3_0" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="f967ab87dea3c49d0ab65491e2c25deb6e237803a363d3063b8ebab0239e0ef4" name="typelib-1_0-EvinceView-3_0" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp151.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="0b7f2362de3256838a2e95e24e0b642e7c66adf3c90c39f5ff20da90313aa08c" name="typelib-1_0-Gdm-1_0" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp151.16.3.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="423e6eb4bf52fd9165776bdcdf633a9bf3cc7f02b5d29ba719cf12ef5cedd6fc" name="typelib-1_0-Gtk-3_0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="bece3a8dcb7c20f0744ff48275a494d129377b79c8f7c9871ed394f80303c27f" name="typelib-1_0-Gtk-3_0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.3.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="79fa974181202d04c048eaa71118020d2b45303eee4640faa4c693d43f6a66a3" name="typelib-1_0-Gtk-3_0" arch="i586">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="702ca2be1e9224efac6691d557b8012ec0233739ec7f0fed030b5885afedc969" name="typelib-1_0-Gtk-3_0" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp151.6.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="c41c60528444df5cbaab300c6f3636d4b321d25431437b68fe9de4e56aed0c29" name="typelib-1_0-JavaScriptCore-4_0" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="428f339e5d2fbcd3ec2804f2b6e70ea8f3be97b7ae8cc1d95e175e29a188edac" name="typelib-1_0-JavaScriptCore-4_0" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="1153d6e40003615683a9223558ceeaf9bf01fad3da63017b244886f77948fd01" name="typelib-1_0-PackageKitGlib-1_0" arch="i586">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="10869c05579fb833729b593fb4ede2f627a0c9d6ec4303ef22203a89589d65e8" name="typelib-1_0-PackageKitGlib-1_0" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp151.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="sckang@suse.com" date="1533816000">- Add PackageKit.tmpfiles: Use tmpfile.d to make sure PackageKit
  doesn't package files in /var (bsc#1098042).</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1539691200">- Add files/directories created by tmpfiles.d under /var as ghost
  entries to the rpm filelist.</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1546862400">- Add PackageKit-systemd-timers.patch: Migrate from cron to
  systemd timer (bsc#1115410).</changelog>
  <changelog author="sckang@suse.com" date="1551700800">- Modify PackageKit-systemd-timers.patch: Fix unit field in
  packagekit-background.timer (boo#1126943).</changelog>
</package>
<package pkgid="97d2c3562c03fee95091f243f868f9b9eb63da87178da44d3cbf054b7bcd51e5" name="typelib-1_0-Thunarx-3_0" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="lp151.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 1.6.6
  - Removed GNU extension -i from sed
  - Bump default size of file properties dialog a bit
  - Respect the "View new folders using" preference (bxo#11606)
  - Improve check for shell scripts and add hidden option for
    bxo#7596
  - Fix some GTK_STOCK icon usages resulting in missing icons
    (bxo#11608)
  - plugins/thunar-wallpaper: Fix icon
  - Fix icon name for folders and a memory leak (bxo#11608)
  - Also query for network location icons
  - Don't use deprecated function
  - Secure threading in the idle thumbnail loading
  - Sidepane treeview: Do not switch folder when clicking a row
    expander
  - Fix cppcheck possible errors/warnings
  - Hide template file extensions in context menu (bxo#11571)
  - thunar-wallpaper: Fix translation in applications other than
    thunar
  - thunar-wallpaper: Check if file is really an image (bxo#11565)
  - Update another copyright string
  - Fix endless rename loop in case of error on the properties
    dialog (bxo#11557)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1429531200">- update to version 1.6.7
  - Improve drag &amp; drop and selecting in the details view
    (bxo#11605)
  - Let row changes accumulate a bit before restoring selection
  - Implement reloading file information on manual reload
  - Extend reload functions to allow a full reload
  - Check in thunar-marshal with new
    _thunar_marshal_BOOLEAN__BOOLEAN
  - Reload files changed by jobs in an idle loop (bxo#11008)
  - Refactor code for moving thumbnail cache file on renames/moves
  - Rework thunar_file_monitor to properly register moved files
  - Add function to reload parent file of a file
  - Fix updating file info for moved files (bxo#11008)
  - Revert "Refresh file info after getting it from cache
    (bxo#11008)"
  - Fix comments
  - Update the location bar after reload (bxo#10518)
  - Fix updating custom actions (bxo#11749)
  - Update rows on changes of case-sensitive and folders-first
    settings
  - Fix typos and grammar mistakes in a few comments
  - Make new windows inherit the history of the origin view
    (bxo#5538)
  - Make new tabs inherit the history of the origin view (bxo#5538)
  - Keep the history across view changes (bxo#10171)
  - Implement functions for copying the history of a view
  - Rename tsv_restore_selection to tsv_select_after_row_deleted
  - Redraw the details view on row changes
  - Restore selection on row changes too (bxo#9886)
  - Improve mouse wheel zoom behaviour
  - Remember and restore file selection on view changes
  - Restore file selection when changing sort order (bxo#9886)
  - Update model with changed binary file size setting immediately
  - Fix typo busy_pulse in thunar-shortcuts-model.c
  - Fix typo in thunar-clipboard-manager
  - Fix Gdk-CRITICAL error
  - Clean up more files with make clean
  - Rework usage of binary file size properties (bxo#11450)
  - Remove duplicate break statement in thunar-standard-view
  - Fix compiler warning about shadowing 'basename' (bxo#11633)
  - thunar/thunar-dbus-service-infos.xml corrections
  - Fix startup id handling for launch requests over D-Bus
    (bxo#9646)
  - Fallback to non-cached version of source file (bxo#9142)
  - Translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1430827200">- update to version 1.6.8
  - watch for CHANGES_DONE_HINT instead of CHANGED and
    ATTRIBUTE_CHANGED (bxo#8377)
  - shortcut view: Fix "selection in selection" graphical bug when
    renaming shortcut
  - fix broken shortcut renaming (bxo#11885)
  - unescape URIs in the shortcut view (bxo#10831)
  - fix compiler warning because of missing curly braces
  - fix compilation error because of wrong variable name
  - fix unescaping of local paths in path entry (bxo#8190)
  - fix escaping and unescaping URI in path entry (bxo#8910)
  - let the tree view keep the focus when clicking on an item
    (bxo#11863)
  - fix switching to the 10th tab via &lt;alt&gt;-&lt;0&gt; keyboard shortcut
  - fix removal of a directory wrongly affecting the current tab
    (bxo#10981)
  - keep the scroll position when restoring the file selection
  - restore selection only when rows-reordered signal is received
    (bxo#11855)
  - for folders copied always append "copy #" to the end of their
    names (bxo#11862)
  - update F5 binding for new ThunarWindow::reload signal
  - do not perform the complete folder reload in idle (bxo#11849)
  - Coverity CID 60623: Unused value
  - Coverity CID 60621: Missing return statement
  - Coverity CID 60620: Explicit null dereferenced
  - Coverity CID 60619: Explicit null dereferenced
  - Coverity CID 60617: Unchecked return value
  - remove unused variable in thunar_standard_view_set_history
  - remove startup notification dependencies (bxo#11837)
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 1.6.9
  - fix ThunarBulkRename script not supporting spaces (bxo#9713)
  - use "Name" column for drag &amp; drop instead of first column
    (bxo#11905)
  - update the path entry icon when current file changes
  - revert changes for restoring the trash in the session client
    (bxo#9513)
  - fix loading the trash bin status at startup (bxo#9513)
  - turn off building gtk-docs API reference
  - fix cppcheck warning about uninitialized variable
  - disable "Set as default application" by default in the chooser
    dialog
  - remember chosen application in the chooser dialog as last used
  - remember the last used application when opening files
  - fix reload when file is replaced with directory of the same
    name
  - do listen for G_FILE_MONITOR_EVENT_ATTRIBUTE_CHANGED
    (bxo#11896)
  - fix comments for toggle-menubar
  - allow opening by middle-click in tree view only for mounted
    devices and resources
  - keep selection in original tree view when middle-clicking for
    new tab/window
  - keep path selected after unmounting a device via KEY_Left
  - unmount device if collapsing a collapsed device tree with
    KEY_Left in the tree view
  - fix wrong network icon shown in tree view
  - fix tree view opening mounted devices in new tab
  - use only open selection instead of open action with KEY_Up and
    KEY_Down
  - fix assertion when hitting KEY_Left on a top-level item in the
    tree view
  - revert workaround for desktop toplevel item in the tree view
  - always select the proper toplevel item in the thunar tree view
  - unescape URI in history error message
  - remove unmounted files from history when going back or forward
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1432296000">- update to version 1.6.10
  - Do not track thunar/thunar-marshal.{c,h}
  - Remove Makefile and Makefile.in files when running distclean
  - Remove subversion $Id$ tags
  - Really fix trash state at startup (bxo#9513, bxo#11913)
  - Use proper return type for thunar_file_reload (bxo#11913)
  - Revert "Fix loading the trash bin status at startup (bxo#9513)"</changelog>
  <changelog author="davejplater@gmail.com" date="1453809600">- Created thunar-appdata.patch to correct mismatched names between
  thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to
  thunar.desktop to solve installation system problems see:
  boo#952324</changelog>
  <changelog author="ronnypeine@gmx.de" date="1487764800">- Created patch thunar-bugfixes.patch fixing the following upstream bugs:
  - Fix a crash for on cut/pasting of multiple files (bxo #12260)
  - Fix a crash when renaming files (boo #1011518, bxo #12264)
  - Fix missing return value for debug in thunar_file_reload (bxo #12827)
  - Fix thunar history being deleted after view change (bxo #12708)
  - Fixing missing return value in standard view
  - Fix crashes when reloading target file after move (bxo #11983)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1492430400">- Update to 1.6.11:
  * Fix a crash for on cut/pasting of multiple files (bxo#12260)
  * Fix a crash when renaming files (bxo#12264)
  * Fix missing return value for debug in thunar_file_reload
    (bxo#12827)
  * Fix thunar history being deleted after view change (bxo#12708)
  * Expand the name column by default in details view (bxo#11357)
  * Silently ignore G_IO_ERROR_FAILED_HANDLED (bxo#8695)
  * Fixing missing return value in standard view
  * Fix crashes when reloading target file after move (bxo#11983)
  * Translation updates: Arabic, Asturian, Basque, Bulgarian,
    Catalan, Croatian, Danish, Dutch (Flemish), English
    (Australia), English (Great Britain), Finnish, French,
    Galician, German, Greek, Hebrew, Hungarian, Icelandic, Italian,
    Korean, Lithuanian, Norwegian Bokmal, Norwegian Nynorsk,
    Occitan, Portuguese, Portuguese (Brazilian), Slovak, Swedish
- Remove thunar-bugfixes.patch (fixed upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- Update to 1.6.12:
  * Fix deadlock in mutex causing Thunar to hang (bxo#13481)
  * Add support for Exif:ImageDescription and Exif:UserComment
  * Do not pass NULL to g_file_test
  * Bump libxfce4panel version for TPA plugin to 4.9.0
  * Switch from XfcePanelImage to GtkImage
  * Fixed a compilation error with the newest dev panel API
  * Translation updates: Catalan, Dutch (Flemish), Galician,
    Korean, Lithuanian, Spanish, Thai</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1511870400">- update to 1.6.13:
  * Handle cases when file watch is not supported (bxo#13881)
  * Missing Trash Translation String (bxo#13409)
  * Handle g_mem_is_system_malloc deprecation
  * Prefer local (file://) URIs than native ones (e.g. smb://)
    (bxo#13845), fixes drag-and-drop to third-party apps.
  * Translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1518868800">- update to 1.6.14:
  * Do not translate "Trash" files and folders (bxo#14211)
  * Crash in thunar_file_is_gfile_ancestor (bxo#14202)
  * Fix potential buffer overflow (bxo#12444)
  * Fix crash on unavailable file move copy (bxo#14056)
  * Translation updates
- partly spec-cleaner fixes</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Ensure neutrality of description.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1524744000">- update to 1.6.15:
  * Thunar User Configurable Actions do not work for remote
    locations (bxo#7652), patch from (bxo#7305)
  * replaced links to "http://thunar.xfce.org/" with
    "https://docs.xfce.org/xfce/thunar/Start/"
  * SIGSEGV when thumbnailer is under heavy load after opening many
    tabs (bxo#13756)
  * Fixed creation of .desktop file when dropping URL into folder
    (bxo#14239)
  * Restoring non-empty folders leaves copy in Trash (bxo#13535)
  * Translation updates
- packaging: do not package huge ChangeLog, NEWS is enough</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529064000">- update to 1.8.1:
  - Downgrade libxfce4-ui required version to 4.12.0
  - Bump exo version to 0.12.0
  - Use symbolic icon for edit button in pathbar
  - Add the right-click menu item "Open with" as well for folders
- 1.8.0:
  - GTK3 Port
  - Replace dbus-glib with GDBus
  - Improved Pathbar style for Location Selector
  - Bump thunarx to version 3 and replace GtkAction with
    ThunarxMenu and ThunarxMenuItem
  - GObject-Introspection support for thunarx-3
  - Regression: Context menu misplaced (bxo#14216)
  - Prevent crash after updating thunar if old thunar deamon is
    still running
  - many other bugfixes, see NEWS file
- rebase / rename thunar-appdata.patch to thunar-1.8-appdata.patch</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1539604800">- update to 1.8.2:
  * Custom actions without an icon could caused the file manager to crash (bxo#14464)
  * Fixed segfault while clicking or typing when using wayland (bxo#14461)
  * Spinner still active after user cancels to mount volume (bxo#14536)
  * Fix standard view border during drag and drop (bxo#14523)
  * Fix build without HAVE_GIO_UNIX (bxo#12863)
  * Fix messed up row-height with disabled "automatically expand columns as needed" in detailed view. (bxo#14548)
  * Add custom date format (bxo#14527)
  * Avoid segfault on file operations (bxo#14281)
  * Update progress when deleting files (bxo#14102)
  * More options for thumbnail size (bxo#14451)
  * Show numeric(%) progress in file operation dialog (bxo#14102)
  * Add Ctrl+= as alternative accelerator for Zoom In (bxo#14586)
  * Fix UCA forgets keyboard shortcut (bxo#14617)
  * Add preference to open new thunar instances as tabs (bxo#13314)
  * Add support for folder.jpg (bxo#14576)
  * Show file size in binary units by default (bxo#14653)
  * Removed start limit from Bulk Renamer to rename by number (bxo#14437)
  * Added preferences item to toggle 'delete' in the context menu (bxo#13327)
  * Added infobox to preferences in order to inform about missing gvfs
  * Right mouse click will not display icons for custom actions (bxo#14685)
  * Allow tabs switch with Ctrl + PgUp/PgDown (bxo#9585)
  * Many minor styling fixes
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548417600">- Update to 1.8.3:
  * Thunar sometimes mounts USB drives with root permission (bxo#14719)
  * FreeBSD -Thunar crash due to passing null to strcmp() (bxo#15059)
  * Add support for org.freedesktop.FileManager1 (bxo#12414)
  * Still 8sec delay on logout when there is an open thunar window (bxo#15008)
  * Thunar does not recover directories opened in a previous session (bxo#14969)
  * Thunar utilizes 100%CPU when the parent directory is not readable (bxo#14900)
  * Add support for CTRL+Z in rename dialog (bxo#14956)
  * Thunar rarely freezes when switching to tree-view (bxo#14960)
  * Crash in tree-view when multiple windows are open (bxo#14714)
  * Improve description of UCA command parameters (bxo#14720)
  * Fixed some Warnings and GLib-GObject-CRITICAL messages
  * Translation updates
- added %license macro
- added Recommends: catfish for file search</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676800">- Update to 1.8.4
  * Emergency release, triggerd by some trouble with the added support for
    org.freedesktop.FileManager1.service in thunar 1.8.3
  * Renamed org.freedesktop.FileManager1.service.in to
    org.xfce.Thunar.FileManager1.service.in to avoid name clashes (bxo#12414)
  * Dont exit when name org.freedesktop.filemanager1 lost on message-dbus
    (bxo#15088)
  * Translation updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1548676801">- fixed bug trackers in latest changelog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added thunar-1.8.4-fix-context-menu.patch fixing "create document"
  sub-menu not showing any content (boo#1134899)
- Switched URL and Source url to https://</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558180800">- Added patch thunar-SEGV-11-on-USB-flash-connection.patch
  Fixes boo#1135362</changelog>
</package>
<package pkgid="096eaece9a3e72aa72663af0b7d534a6facb0e203ab3ccd563851904adfbe900" name="typelib-1_0-Tracker-2_0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="33d3fd209522b3b6886a494c4e7b78996fda652c9140060c603f7d6dda0836a4" name="typelib-1_0-Tracker-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="fcbb1419fc21b71286ed2e35664538c429d8d6da5fb18a03dc628ceabc8e152b" name="typelib-1_0-TrackerControl-2_0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="f2e85912919c8122920ab52ca010cc7c5ec370ce804300dc57ef946365fa491d" name="typelib-1_0-TrackerControl-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="cfedeb404c2ff5380db078587f15d6fecd1ef0b795d9b12c723fb01b1aa00f53" name="typelib-1_0-TrackerMiner-2_0" arch="i586">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="66a6c3a7d4df06c6071d18f7e908a91f8b3af09179b31271950ebffb4ecba94d" name="typelib-1_0-TrackerMiner-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="lp151.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498392000">- Add tracker-libtracker-data-protect-sqlite3_bind.patch:
  libtracker-data: Protect sqlite3_bind*() with interface lock.
  There may be multiple cursors/db_statements from the same db
  interface being accessed from multiple threads. This must be
  under the TrackerDBInterface lock in order to prevent threading
  issues (rh#1404285).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 1.12.1:
  + libtracker-sparql:
  - Add osinfo to the default namespace.
  - Protect sqlite3_bind* with interface lock.
  + tracker-extract: Whitelist openat(), with caveats.
  + Updated translations.
- Drop upstream fixed patches:
  + tracker-libtracker-sparql-add-osinfo-ontology.patch.
  + tracker-libtracker-common-whitelist-openat.patch.
  + tracker-libtracker-data-protect-sqlite3_bind.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.12.2:
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Fix TrackerDBInterface being reused with no FTS set up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.12.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fix typo in userguides miner DBus name, fixes spam on journald
    trying to start it up.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 1.13.0:
  + Added support for the Meson build system, autotools will be
    eventually discontinued.
  + Compile fixes.
  + Fixed introspection annotations.
  + libtracker-sparql: Support osinfo ontology in TrackerNamespace.
  + Fix possible source of stale files in TrackerFileSystem.
  + Whitelist some more syscalls.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1503489601">- Update to version 1.99.0:
  + Domain ontologies: it is now possible to create domain-specific
    SPARQL endpoints with customizable ontologies and data
    locations. It is possible to do so either in-process using the
    traditional Tracker daemons to do the work (Note: miners rely
    on Nepomuk ontology).
  + Deleted nautilus/firefox/evolution/thunderbird plugins. They
    were in a pitiful state of maintainership, the latter 2 being
    known broken for some time already.
  + Deleted tracker-needle. It has been in strict maintenance state
    for years, since then other UIs have integrated Tracker search
    and offer a more compelling and modern experience.
  + Deleted tracker-preferences. Tracker has been using GSettings
    for years, so doesn't specifically require an UI for it,
    there's of course room for desktop integrated configuration,
    gnome-control-center does this for example.
  + Made portions of libtracker-miner useful on the client side.
    Miners don't mandate anymore an org.freedesktop.Tracker1.Miner
    DBus interface/name, this is instead delegated on
    TrackerMinerProxy. TrackerMinerFS has been made largely
    independent of the ontology in use, all high level operations
    that do require SPARQL updates are now exposed in
    TrackerMinerFSClass.
  + Removed deprecated and duplicate API on libtracker-miner.
  + Added documentation about creating and maintaining ontologies.
  + Removed maemo leftovers.
  + libtracker-sparql: Protect sqlite3_bind* with interface lock.
  + Improvements to meson build.
  + Updated translations.
- Drop the following packages:
  + nautilus-extension-tracker-tags.
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489602">- Update to version 1.99.1:
  + Notable speedups to tracker-miner-fs, main loop overhead was
    greatly reduced by processing elements in batches. Indexing has
    been observed to be up to 2x faster, and startup on an indexed
    and up-to-date filesystem up to 3x.
  + More notable speedups to tracker-miner-fs startup, this applies
    only to filesystems where the number of indexed folders exceed
    the amount of inotify handles. Inotify monitoring is
    temporarily disabled during filesystem mtime checks, resulting
    in up to 4x faster startup. (In addition to the previous
    point).
  + Refurbished the allocation scheme for underlying DB interfaces.
    The benefit is twofold, this makes TrackerSparqlConnections
    truly isolated instances, and results in much reduced mutex
    contention on stress situations.
  + Dropped deprecated API to get direct/bus connections. Use
    tracker_sparql_connection_get().
  + Deprecated TrackerSparqlBuilder. Use TrackerResource.
  + Added tracker_sparql_connection_get_namespace_manager() to
    fetch the namespaces as per the ontology of the connection.
  + Dropped support for non-standard SPARQL syntax "AS var", the
    right syntax is "AS ?var", defined in SPARQL1.1 and accepted by
    Tracker for a long time.
  + Added tracker:title-order() sparql function, only meant to be
    used in "ORDER BY" clauses. It drops the common articles at the
    beginning of the given variable for sorting purposes.
  + Fix shutdown issues on tracker-store introduced in 1.99.0. No
    more spurious integrity checks on startup.
  + Misc code and build fixes.
  + Updated translations.
- Obsolete dropped sub packages:
  + tracker-gui.
  + tracker-miner-evolution.
  + tracker-miner-firefox.
  + tracker-miner-thunderbird.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503489603">- Update to version 1.99.2:
  + Miners have been split from the Tracker package.
  + Sqlite 3.20 introduced incompatible changes in the way FTS5 can
    be extended, compile/runtime checks were added to adapt to the
    new safer way if Sqlite &gt;= 3.20.0 is found.
  + Elements are no longer leaked in the base Resource table. A
    refcounted approach ensures no longer needed elements are
    cleaned up from that table. The database will no longer
    indefinitely grow, it will be cleaned up and vacuumed
    periodically.
  + Fixed several Coverity warnings (CIDS: 1452447, 1188417,
    1188418, 1188428, 1452443, 1452445, 1452449)
  + Misc code and build fixes.
  + Documentation improvements.
- Eliminate build_extras conditions and tracker-extras.spec: this
  basically only had the rss miner left to be built, and all miners
  are now moved to a separate source package (tracker-miners).
- Clean up BuildRequires: drop things that were only used by the
  extractors/miners.
- Have libtracker-common-2_0 obsolete libtracker-common-1_0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489604">- Update to version 1.99.3:
  + Mandate that SQLite &gt;= 3.20.0 must have --enable-fts5. SQLite
    devs made forwards and backwards incompatible changes to the
    FTS5 module, it is not sustainable anymore to ship a FTS5
    module for all combinations. The current FTS5 module in Tracker
    is preserved for older SQLite versions.
  + Fixed a Coverity warning (CID #1453480).
  + Misc code and build fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 2.0.0:
  + Tracker shall from now on use semantic versioning
  + Drop --all from "tracker status" subcommand, it is the default
    behavior now.
  + TrackerDecorator internal operations are now cancelled on
    shutdown.
  + Add cancellable argument to sync libtracker-control call.
  + Build fixes and minor cleanups.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Add tracker-libtracker-fixes.patch: Fix various bugs in
  libtracker (bgo#787452).
- Move AUTHORS ChangeLog README and NEWS to devel sub-package, only
  developers care about these anyway, silences rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Update to version 2.0.1:
  + libtracker-fts: Fix FTS queries that included stop words.
  + libtracker-sparql: Fix introspection annotations for
    TrackerNotifier.
  + libtracker-miner:
  - Fix cancellation of TrackerDecorator.
  - Several fixes to causes of nie:url UNIQUE constraint errors,
    and better resilience against prior stale data.
  + Meson fixes.
  + Compiler warning fixes.
  + Updated translations.
- Drop tracker-libtracker-fixes.patch: fixed upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510833600">- Update to version 2.0.2:
  + tests: Cleanups and Coverity fixes. A testsuite for
    libtracker-miner's TrackerMinerFS object was added.
  + meson: Many small improvements.
  + libtracker-common: Preparation work to be able to build
    tracker/tracker-miners as a bundle.
  + libtracker-direct: Implement update_array_async()
  + libtracker-miner:
  - Multiple cleanups and code simplifications.
  - Properly honor lack of CHECK_MTIME flag, resulting on faster
    startup times if it's not set.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/Tracker: current
  Tracker's web page.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515240000">- Add tracker-nb-translations.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518004800">- Update to version 2.0.3:
  + build:
  - Improvements in meson support.
  - Remove stale dependencies after Tracker miners split.
  + tests:
  - Many fixes to functional tests.
  - Remove old checks for maemo-specific features.
  + libtracker-miner: Small code improvements.
  + libtracker-sparql: use gint32 to unpack 'i' GVariant format.
  + Updated translations.
- Drop tracker-nb-translations.patch: Fixed upstream.
- Minor spec-clean, use autosetup and make_build macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523966400">- Replace pkgconfig(libnm-glib) with pkgconfig(libnm)
  BuildRequires, this is what configure checks for.</changelog>
  <changelog author="mgorse@suse.com" date="1554206400">- Add tracker-sqlite-3.25-rename-tables.patch: drop FTS table/view
  before ontology update (glgo#GNOME/tracker#40, boo#1131229)</changelog>
  <changelog author="mgorse@suse.com" date="1558699200">- Add tracker-delete-elements-individually.patch: delete
  TrackerResource elements one by one (boo#1123869
  glgo#GNOME/tracker#28).</changelog>
</package>
<package pkgid="c39d158a0a6e7df5ad15cb4dec697791273130cdfec12e650beb15f8a85dfd98" name="typelib-1_0-WebKit2-4_0" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="1664bee2c24fa2b89b14eb0c0bb5bcd9672590ca2a47e454690aa697824f1eea" name="typelib-1_0-WebKit2-4_0" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="d1f966454d700d1800fa9d21847ccb87e7c0f341d3b1d0020cc3a58886d7f465" name="typelib-1_0-WebKit2WebExtension-4_0" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="c239e88185d73eb11e4bf669a010e35e2cee8d7f1d97c4b49f379ffaf5b96986" name="typelib-1_0-WebKit2WebExtension-4_0" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="864318ed96f6f9e8707d6205c37ff6b154d4f963106e4b7599c44d895d54bba9" name="u2f-host" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).
- Applied spec-cleaner</changelog>
</package>
<package pkgid="c4f91de945603963e114cbfd5c12cb70e8071cf810ad1609d59f412a837ae898" name="u2f-host" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp151.2.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1549627200">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559044800">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
</package>
<package pkgid="e46aac8ceb517957e7f489a6ecc1b1aef58ff708ff1cbc31ec6b6db52eeb60d6" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20190312" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
  <changelog author="mpluskal@suse.com" date="1528459200">- Update to version 20180606:
  * brcm: update firmware for bcm4356 pcie
  * brcm: update firmware for bcm4354 sdio
  * brcm: update firmware for bcm43362 sdio
  * brcm: update firmware for bcm43340 sdio
  * brcm: update firmware for bcm43430 sdio
  * Update Cypress license termination clause
  * amdgpu: update vega10 VCE firmware to version 55.3
  * linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D0)
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qcom: add venus firmware files for v5.2
  * linux-firmware: liquidio: update vswitch firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 20180717:
  * amdgpu: update copyright date
  * amdgpu: add initial VegaM firmware
  * amdgpu: sync up vega10 firmware with 18.20 release
  * amdgpu: sync up raven firmware with 18.20 release
  * amdgpu: sync up polaris12 firmware with 18.20 release
  * amdgpu: sync up polaris11 firmware with 18.20 release
  * amdgpu: sync up polaris10 firmware with 18.20 release
  * amdgpu: sync up verde firmware with 18.20 release
  * amdgpu: sync up pitcairn firmware with 18.20 release
  * amdgpu: sync up tahiti firmware with 18.20 release
  * amdgpu: sync up oland firmware with 18.20 release
  * amdgpu: sync up hainan firmware with 18.20 release
  * amdgpu: sync up kaveri firmware with 18.20 release
  * amdgpu: sync up mullins firmware with 18.20 release
  * amdgpu: sync up kabini firmware with 18.20 release
  * amdgpu: sync up hawaii firmware with 18.20 release
  * amdgpu: sync up bonaire firmware with 18.20 release
  * WHENCE: Fix typo Version
  * cxgb4: update firmware to revision 1.20.8.0</changelog>
  <changelog author="tiwai@suse.de" date="1532001600">- Remove useless check_whence.py that leads to unnecessary python
  dependency (bsc#1101818);
  also removing the python3 hack at prep, too</changelog>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
</package>
<package pkgid="fa5abd5514fbd95b9e51d6d2a8f4f1ab1eb25ef7d1eeb2310b279545dffbb63e" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20190618" rel="lp151.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1533038400">- Update to version 20180730:
  * linux-firmware: add firmware for mt76x2u
  * wl18xx: update firmware file 8.9.0.0.79
  * Mellanox: Add new mlxsw_spectrum firmware 13.1702.6
  * WHENCE: Remove reference to amdgpu/vegam_me_2.bin
  * linux-firmware: mediatek: add MT7622 Bluetooth firmwares and license file
  * brcm: add 43430 based AP6212 and 1DX NVRAM
  * linux-firmware: update Marvell USB8801 B0 firmware image</changelog>
  <changelog author="mpluskal@suse.com" date="1534334400">- Update to version 20180814:
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: add firmware for mt76x0
  * qcom: update venus firmware files for v5.2
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.31</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535544000">- Update to version 20180825:
  * amdgpu: sync up polaris10 firmware with 18.30 release
  * amdgpu: sync up vega10 firmware with 18.30 release
  * amdgpu: sync up raven firmware with 18.30 release
  * amdgpu: sync up polaris12 firmware with 18.30 release
  * amdgpu: sync up tonga firmware with 18.30 release
  * amdgpu: sync up polaris11 firmware with 18.30 release
  * amdgpu: sync up fiji firmware with 18.30 release
  * linux-firmware: add firmware for mhdp8546
  * qed: Add firmware 8.37.7.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537358400">- Update to version 20180913:
  * brcm: update firmware for bcm43362 sdio
  * Mellanox: Add new mlxsw_spectrum firmware 13.1703.4
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8822CU
  * nvidia: switch GP10[2467] to newer scrubber/ACR firmware (from GP108)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1538481600">- Update to version 20181001:
  * ti-connectivity: add firmware for CC2560(A) Bluetooth
  * linux-firmware: mediatek: add firmware for mt7668u Bluetooth
  * nvidia: add GV100 signed firmware
  * firmware/icl/dmc: Add v1.07 of DMC for Icelake
  * linux-firmware: add Marvell SD8997 firmware image
  * qca: update BT firmware files for QCA ROME chip.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1541592000">- Update to version 20181026: (bsc#1122456)
  * qed: Add 8.37.7.0 firmware image
  * amdgpu: add raven dmcu firmware
  * amdgpu: update raven firmware to 18.40
  * amdgpu: update fiji firmware to 18.40
  * amdgpu: update tonga firmware to 18.40
  * amdgpu: update carrizo firmware to 18.40
  * amdgpu: update polaris10 firmware to 18.40
  * amdgpu: update vega10 firmware to 18.40
  * linux-firmware: add firmware for mt7650e
  * linux-firmware: add MC firmware for NXP DPAA2 SoCs
  * linux-firmware: liquidio: fix GPL compliance issue
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: add firmware for mt7610e
  * Update Intel OPA hfi1 firmware
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.6.0.1-00003
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.6-00140
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00041
  * ath10k: QCA9377 hw1.0: add firmware-6.bin to WLAN.TF.2.1-00021-QCARMSWP-1
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to RM.4.4.1.c2-00057-QCARMSWP-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.6-00140
  * nfp: Add Agilio BPF firmware rev 2.0.6.124
  * rtw88: Add firmware file for driver rtw88
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.37
  * iwlwifi: add -41.ucode firmwares for 9000 series
  * iwlwifi: update firmwares for 9000 series
  * iwlwifi: update firmwares for 7000, 8000 and 9000 series
  * nfp: update Agilio SmartNIC firmware to rev 2.1.13</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545048000">- Update to version 20181217:
  * iwlwifi: update firmwares for 8000 series
  * iwlwifi: add -43.ucode for 9000 series
  * iwlwifi: update -41.ucode for 9000 series
  * brcm: provide new firmwares for BCM4366 chipset
  * Mellanox: Add new mlxsw_spectrum firmware 13.1910.622
  * cavium: Update firmware for CNN55XX crypto driver
  * amdgpu: update vega12 fw for 18.50 release
  * amdgpu: update vega10 fw for 18.50 release
  * amdgpu: update raven fw for 18.50 release
  * amdgpu: update polaris11 fw for 18.50 release
  * amdgpu: update polaris10 fw for 18.50 release
  * amdgpu: add firmware for vega12
  * amdgpu: Add new polaris MC firmwares
  * amdgpu: Add new polaris SMC firmwares
  * linux-firmware: Update AMD cpu microcode
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13
  * microchip: add firmware for VSC8574 and VSC8584 Ethernet PHYs
  * linux-firmware: intel: Update Cannonlake audio firmware.
  * firmware/huc/bxt: Add huC Update for BXT
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16
  * cxgb4: update firmware to revision 1.21.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545307200">- Update to version 20181218: (FATE#326045,FATE#325856,FATE#326294)
  * Revert "amdgpu: update vega10 fw for 18.50 release"
  * brcm: Add 4330 NVRAM for the Prowise PT301 tablet
  * brcm: Add 43430 NVRAM for the Chuwi Vi8 Plus tablet
  * brcm: Add 43340 based AP6234 NVRAM for the Meegopad T08 HDMI stick
  * brcm: Add 43430a0 based AP6212 NVRAM for the Jumper EZpad mini 3 tablet
  * brcm: Add 43430a0 based AP6212 NVRAM for the Onda V80 Plus tablet
  * brcm: Add 4356 based AP6356 NVRAM for the GPD win handheld
  * brcm: Add brcmfmac43362-sdio.lemaker,bananapro.txt symlink
  * brcm: Add 43362 based AP6210 NVRAM for the Cubietech Cubietruck
  * WHENCE: Put quotes around brcmfmac NVRAM filenames
  * check_whence.py: Add support for filenames with spaces in them
  * rtl_bt: Add firmware and configuration files for the Bluetooth part of RTL8723BS</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547208000">- Add firmware for bcm43430 and bcm43455 (fate#326215)
  * brcmfmac43430-sdio.raspberrypi-rpi.txt
  * brcmfmac43455-sdio.clm_blob
  * brcmfmac43455-sdio.raspberrypi-rpi.txt</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1547553600">- Fix firmware for bcm43430 and bcm43455 (fate#326215)
  * rename brcmfmac43450 and brcfmac43455 to the compatible name
    used by brcmf_of_probe
  * delete brcmfmac43455-sdio.clm_blob as it was not accepted upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Update to version 20190118 (bsc#1110720,FATE#325946,bsc#1104289,
  bsc#1128292):
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * brcm: Fix filename for BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * amdgpu: add raven2 fw for 18.50 release
  * amdgpu: add picasso fw for 18.50 release
  * Revert "brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+"
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * brcm: Add BCM43430 NVRAM for the Raspberry Pi 3 Model B
  * brcm: Add BCM43455 NVRAM for Raspberry Pi 3 B+
  * linux-firmware: update Marvell USB8801 B0 firmware image
  * iwlwifi: update firmwares for 9000 series
  * cxgb4: update firmware to revision 1.22.9.0</changelog>
  <changelog author="tiwai@suse.de" date="1548072000">- Remove brcm RPi f/w that are already included in the upstream tree</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550059200">- Update to version 20190212:
  * bnx2x: Add FW 7.13.11.0. (bsc#1132303,bsc#1136498)
  * amdgpu: add firmware for vega20 from 18.50
  * amdgpu: bump year on license
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * linux-firmware: add Marvell SD8977 firmware image
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024
  * ath10k: QCA6174 hw3.0: update board-2.bin</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551355200">- Update to version 20190221:
  * linux-firmware: Add AMD SEV firmware
  * WHENCE: Correct errant entries
  * amdgpu: update raven2 rlc firmware
  * amdgpu: drop raven2_sdma1.bin
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * qca: Add firmware files for BT chip wcn3990.
  * nvidia: add TU10x typec controller firmware</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1552392000">- Update to version 20190312:
  * drm/amdgpu: update picasso to latest from 18.50 branch
  * drm/amdgpu: update polaris12 to latest from 18.50 branch
  * drm/amdgpu: update vega20 to latest from 18.50 branch
  * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0
  * rtl_bt: Update firmware for BT part of RTL8822C
  * linux-firmware: update Marvell 8787/8801/8887 firmware images
  * linux-firmware: update Marvell 8897/8997 firmware images
  * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1
  * QCA: Add the fw files for BT Chip QCA6174.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555329600">- Update to version 20190409:
  * linux-firmware: Add firmware file for Intel Bluetooth 22161
  * cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
  * linux-firmware: Update NXP Management Complex firmware to version 10.14.3
  * linux-firmware: add firmware for MT7615E
  * mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
  * linux-firmware: update Marvell 8797/8997 firmware images
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
  * cxgb4: update firmware to revision 1.23.3.0
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1556884800">- Update to version 20190502:
  * amdgpu: update vega20 to the latest 19.10 firmware
  * amdgpu: update vega12 to the latest 19.10 firmware
  * amdgpu: update vega10 to the latest 19.10 firmware
  * amdgpu: update polaris11 to the latest 19.10 firmware
  * amdgpu: update polaris10 to the latest 19.10 firmware
  * amdgpu: update raven2 to the latest 19.10 firmware
  * amdgpu: update raven to the latest 19.10 firmware
  * amdgpu: update picasso to the latest 19.10 firmware
  * linux-firmware: update fw for qat devices
  * Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
  * drm/i915/firmware: Add ICL HuC v8.4.3238
  * drm/i915/firmware: Add ICL GuC v32.0.3
  * drm/i915/firmware: Add GLK HuC v03.01.2893
  * drm/i915/firmware: Add GLK GuC v32.0.3
  * drm/i915/firmware: Add KBL GuC v32.0.3
  * drm/i915/firmware: Add SKL GuC v32.0.3
  * drm/i915/firmware: Add BXT GuC v32.0.3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1558699200">- Update to version 20190514:
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * amlogic: add video decoder firmwares
  * iwlwifi: update -46 firmwares for 22260 and 9000 series
  * iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
  * iwlwifi: add -46.ucode firmwares for 9000 series</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560168000">- Update to version 20190607:
  * linux-firmware: update firmware for mhdp8546
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * imx: sdma: update firmware to v3.5/v4.5
  * nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1560945600">- Update to version 20190618:
  * cavium: Add firmware for CNN55XX crypto driver.
  * linux-firmware: Update firmware file for Intel Bluetooth 22161
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
  * linux-firmware: update licence text for Marvell firmware</changelog>
</package>
<package pkgid="d65bd2079add34dda7e99df1676c90e206ad71491de1d85a8e62d6023ebb7e8b" name="ucode-intel" arch="src">
  <version epoch="0" ver="20190618" rel="lp151.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1535112000">- updated to 20180807a, no change except licensing. (bsc#1104479)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1552564800">- Update to 20190312 release (bsc#1129231)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AML-Y22      H0       6-8e-9/10           0000009e Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0           000000a4 Core Gen8 Mobile
  - WHL-U        V0       6-8e-d/94           000000b2 Core Gen8 Mobile
  - CFL-S        P0       6-9e-c/22           000000a2 Core Gen9 Desktop
  - CFL-H        R0       6-9e-d/22           000000b0 Core Gen9 Mobile
  - ---- updated platforms ------------------------------------
  - HSX-E/EP     Cx/M1    6-3f-2/6f 0000003d-&gt;00000041 Core Gen4 X series; Xeon E5 v3
  - HSX-EX       E0       6-3f-4/80 00000012-&gt;00000013 Xeon E7 v3
  - SKX-SP       H0/M0/U0 6-55-4/b7 0200004d-&gt;0000005a Xeon Scalable
  - SKX-D        M1       6-55-4/b7 0200004d-&gt;0000005a Xeon D-21xx
  - BDX-DE       V1       6-56-2/10 00000017-&gt;00000019 Xeon D-1520/40
  - BDX-DE       V2/3     6-56-3/10 07000013-&gt;07000016 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  - BDX-DE       Y0       6-56-4/10 0f000012-&gt;0f000014 Xeon D-1557/59/67/71/77/81/87
  - BDX-NS       A0       6-56-5/10 0e00000a-&gt;0e00000c Xeon D-1513N/23/33/43/53
  - APL          D0       6-5c-9/03 00000032-&gt;00000036 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  - APL          E0       6-5c-a/03 0000000c-&gt;00000010 Atom x5/7-E39xx
  - GLK          B0       6-7a-1/01 00000028-&gt;0000002c Pentium Silver N/J5xxx, Celeron N/J4xxx
  - KBL-U/Y      H0       6-8e-9/c0 0000008e-&gt;0000009a Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 00000096-&gt;0000009e Core Gen8 Mobile
  - KBL-H/S/E3   B0       6-9e-9/2a 0000008e-&gt;0000009a Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 00000096-&gt;000000aa Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S B0 6-9e-b/02 0000008e-&gt;000000aa Core Gen8</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1557230400">- Intel QSR 2019.1 Microcode release (bsc#1111331 CVE-2018-12126
  CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CLX-SP       B1       6-55-7/bf           05000021 Xeon Scalable Gen2
  - ---- updated platforms ------------------------------------
  - SNB          D2/G1/Q0 6-2a-7/12 0000002e-&gt;0000002f Core Gen2
  - IVB          E1/L1    6-3a-9/12 00000020-&gt;00000021 Core Gen3
  - HSW          C0       6-3c-3/32 00000025-&gt;00000027 Core Gen4
  - BDW-U/Y      E0/F0    6-3d-4/c0 0000002b-&gt;0000002d Core Gen5
  - IVB-E/EP     C1/M1/S1 6-3e-4/ed 0000042e-&gt;0000042f Core Gen3 X Series; Xeon E5 v2
  - IVB-EX       D1       6-3e-7/ed 00000714-&gt;00000715 Xeon E7 v2
  - HSX-E/EP     Cx/M1    6-3f-2/6f 00000041-&gt;00000043 Core Gen4 X series; Xeon E5 v3
  - HSX-EX       E0       6-3f-4/80 00000013-&gt;00000014 Xeon E7 v3
  - HSW-U        C0/D0    6-45-1/72 00000024-&gt;00000025 Core Gen4
  - HSW-H        C0       6-46-1/32 0000001a-&gt;0000001b Core Gen4
  - BDW-H/E3     E0/G0    6-47-1/22 0000001e-&gt;00000020 Core Gen5
  - SKL-U/Y      D0/K1    6-4e-3/c0 000000c6-&gt;000000cc Core Gen6
  - SKX-SP       H0/M0/U0 6-55-4/b7 0200005a-&gt;0000005e Xeon Scalable
  - SKX-D        M1       6-55-4/b7 0200005a-&gt;0000005e Xeon D-21xx
  - BDX-DE       V1       6-56-2/10 00000019-&gt;0000001a Xeon D-1520/40
  - BDX-DE       V2/3     6-56-3/10 07000016-&gt;07000017 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  - BDX-DE       Y0       6-56-4/10 0f000014-&gt;0f000015 Xeon D-1557/59/67/71/77/81/87
  - BDX-NS       A0       6-56-5/10 0e00000c-&gt;0e00000d Xeon D-1513N/23/33/43/53
  - APL          D0       6-5c-9/03 00000036-&gt;00000038 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  - SKL-H/S      R0/N0    6-5e-3/36 000000c6-&gt;000000cc Core Gen6; Xeon E3 v5
  - DNV          B0       6-5f-1/01 00000024-&gt;0000002e Atom Processor C Series
  - GLK          B0       6-7a-1/01 0000002c-&gt;0000002e Pentium Silver N/J5xxx, Celeron N/J4xxx
  - AML-Y22      H0       6-8e-9/10 0000009e-&gt;000000b4 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 0000009a-&gt;000000b4 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 0000009e-&gt;000000b4 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000a4-&gt;000000b8 Core Gen8 Mobile
  - WHL-U        V0       6-8e-d/94 000000b2-&gt;000000b8 Core Gen8 Mobile
  - KBL-G/H/S/E3 B0       6-9e-9/2a 0000009a-&gt;000000b4 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000aa-&gt;000000b4 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000aa-&gt;000000b4 Core Gen8
  - CFL-H/S      P0       6-9e-c/22 000000a2-&gt;000000ae Core Gen9
  - CFL-H        R0       6-9e-d/22 000000b0-&gt;000000b8 Core Gen9 Mobile</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1557921600">- updated to official QSR 2019. Microcode release (bsc#1111331
  CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - --- new platforms ----------------------------------------
  VLV          C0       6-37-8/02           00000838 Atom Z series
  VLV          C0       6-37-8/0C           00000838 Celeron N2xxx, Pentium N35xx
  VLV          D0       6-37-9/0F           0000090c Atom E38xx
  CHV          C0       6-4c-3/01           00000368 Atom X series
  CHV          D0       6-4c-4/01           00000411 Atom X series
  Readded what missing in last update:
  BDX-ML       B0/M0/R0 6-4f-1/ef 0b00002e-&gt;00000036 Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1563364800">- Updated to 20190618 release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061d-&gt;0000061f Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000714-&gt;00000718 Xeon E3/E5, Core X</changelog>
</package>
<package pkgid="245ccd3c5083f348a3ed9785d934a8d22be28c3355e84caf21bb2680a93ad127" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20190618" rel="lp151.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1535112000">- updated to 20180807a, no change except licensing. (bsc#1104479)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1552564800">- Update to 20190312 release (bsc#1129231)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AML-Y22      H0       6-8e-9/10           0000009e Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0           000000a4 Core Gen8 Mobile
  - WHL-U        V0       6-8e-d/94           000000b2 Core Gen8 Mobile
  - CFL-S        P0       6-9e-c/22           000000a2 Core Gen9 Desktop
  - CFL-H        R0       6-9e-d/22           000000b0 Core Gen9 Mobile
  - ---- updated platforms ------------------------------------
  - HSX-E/EP     Cx/M1    6-3f-2/6f 0000003d-&gt;00000041 Core Gen4 X series; Xeon E5 v3
  - HSX-EX       E0       6-3f-4/80 00000012-&gt;00000013 Xeon E7 v3
  - SKX-SP       H0/M0/U0 6-55-4/b7 0200004d-&gt;0000005a Xeon Scalable
  - SKX-D        M1       6-55-4/b7 0200004d-&gt;0000005a Xeon D-21xx
  - BDX-DE       V1       6-56-2/10 00000017-&gt;00000019 Xeon D-1520/40
  - BDX-DE       V2/3     6-56-3/10 07000013-&gt;07000016 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  - BDX-DE       Y0       6-56-4/10 0f000012-&gt;0f000014 Xeon D-1557/59/67/71/77/81/87
  - BDX-NS       A0       6-56-5/10 0e00000a-&gt;0e00000c Xeon D-1513N/23/33/43/53
  - APL          D0       6-5c-9/03 00000032-&gt;00000036 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  - APL          E0       6-5c-a/03 0000000c-&gt;00000010 Atom x5/7-E39xx
  - GLK          B0       6-7a-1/01 00000028-&gt;0000002c Pentium Silver N/J5xxx, Celeron N/J4xxx
  - KBL-U/Y      H0       6-8e-9/c0 0000008e-&gt;0000009a Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 00000096-&gt;0000009e Core Gen8 Mobile
  - KBL-H/S/E3   B0       6-9e-9/2a 0000008e-&gt;0000009a Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 00000096-&gt;000000aa Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S B0 6-9e-b/02 0000008e-&gt;000000aa Core Gen8</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1557230400">- Intel QSR 2019.1 Microcode release (bsc#1111331 CVE-2018-12126
  CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CLX-SP       B1       6-55-7/bf           05000021 Xeon Scalable Gen2
  - ---- updated platforms ------------------------------------
  - SNB          D2/G1/Q0 6-2a-7/12 0000002e-&gt;0000002f Core Gen2
  - IVB          E1/L1    6-3a-9/12 00000020-&gt;00000021 Core Gen3
  - HSW          C0       6-3c-3/32 00000025-&gt;00000027 Core Gen4
  - BDW-U/Y      E0/F0    6-3d-4/c0 0000002b-&gt;0000002d Core Gen5
  - IVB-E/EP     C1/M1/S1 6-3e-4/ed 0000042e-&gt;0000042f Core Gen3 X Series; Xeon E5 v2
  - IVB-EX       D1       6-3e-7/ed 00000714-&gt;00000715 Xeon E7 v2
  - HSX-E/EP     Cx/M1    6-3f-2/6f 00000041-&gt;00000043 Core Gen4 X series; Xeon E5 v3
  - HSX-EX       E0       6-3f-4/80 00000013-&gt;00000014 Xeon E7 v3
  - HSW-U        C0/D0    6-45-1/72 00000024-&gt;00000025 Core Gen4
  - HSW-H        C0       6-46-1/32 0000001a-&gt;0000001b Core Gen4
  - BDW-H/E3     E0/G0    6-47-1/22 0000001e-&gt;00000020 Core Gen5
  - SKL-U/Y      D0/K1    6-4e-3/c0 000000c6-&gt;000000cc Core Gen6
  - SKX-SP       H0/M0/U0 6-55-4/b7 0200005a-&gt;0000005e Xeon Scalable
  - SKX-D        M1       6-55-4/b7 0200005a-&gt;0000005e Xeon D-21xx
  - BDX-DE       V1       6-56-2/10 00000019-&gt;0000001a Xeon D-1520/40
  - BDX-DE       V2/3     6-56-3/10 07000016-&gt;07000017 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  - BDX-DE       Y0       6-56-4/10 0f000014-&gt;0f000015 Xeon D-1557/59/67/71/77/81/87
  - BDX-NS       A0       6-56-5/10 0e00000c-&gt;0e00000d Xeon D-1513N/23/33/43/53
  - APL          D0       6-5c-9/03 00000036-&gt;00000038 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  - SKL-H/S      R0/N0    6-5e-3/36 000000c6-&gt;000000cc Core Gen6; Xeon E3 v5
  - DNV          B0       6-5f-1/01 00000024-&gt;0000002e Atom Processor C Series
  - GLK          B0       6-7a-1/01 0000002c-&gt;0000002e Pentium Silver N/J5xxx, Celeron N/J4xxx
  - AML-Y22      H0       6-8e-9/10 0000009e-&gt;000000b4 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 0000009a-&gt;000000b4 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 0000009e-&gt;000000b4 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000a4-&gt;000000b8 Core Gen8 Mobile
  - WHL-U        V0       6-8e-d/94 000000b2-&gt;000000b8 Core Gen8 Mobile
  - KBL-G/H/S/E3 B0       6-9e-9/2a 0000009a-&gt;000000b4 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000aa-&gt;000000b4 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000aa-&gt;000000b4 Core Gen8
  - CFL-H/S      P0       6-9e-c/22 000000a2-&gt;000000ae Core Gen9
  - CFL-H        R0       6-9e-d/22 000000b0-&gt;000000b8 Core Gen9 Mobile</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1557921600">- updated to official QSR 2019. Microcode release (bsc#1111331
  CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - --- new platforms ----------------------------------------
  VLV          C0       6-37-8/02           00000838 Atom Z series
  VLV          C0       6-37-8/0C           00000838 Celeron N2xxx, Pentium N35xx
  VLV          D0       6-37-9/0F           0000090c Atom E38xx
  CHV          C0       6-4c-3/01           00000368 Atom X series
  CHV          D0       6-4c-4/01           00000411 Atom X series
  Readded what missing in last update:
  BDX-ML       B0/M0/R0 6-4f-1/ef 0b00002e-&gt;00000036 Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1563364800">- Updated to 20190618 release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091)
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061d-&gt;0000061f Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000714-&gt;00000718 Xeon E3/E5, Core X</changelog>
</package>
<package pkgid="3806b2a7235d313e5593d7ad4d6b28c797b2ff1a78de12e8a2720d3693ea5ecc" name="update-test-32bit-pkg" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="5a90051df13f5aa20d308cafc532c39d35702ab07ceb34fa3e0942a3b02427c7" name="update-test-32bit-pkg" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="6b70c26d037c7d185bbccd13195f4eb4d3438b06de095ed97971e865e934cb63" name="update-test-affects-package-manager" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="6c09fa867c3c1119ba22c5196ccb1bebc950990e70c6c7105e7f45260c966fab" name="update-test-affects-package-manager" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="e5cdca40a84cc363ddde74bed51740305c8fece44fbcf54c2b9c5d1a5c249f01" name="update-test-broken" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="c1b5526fb01fbbb01ca5a1a66d30541b5e273beb60cc1b28af8a9a75a128f3d8" name="update-test-broken" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="744887b610761626763826e3133e92dc83ee7f406e6bc7ed980f9ac48b17fdec" name="update-test-feature" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="818d5755cb0faca58824e0f838bce7852324f921dad2f291cacd7c3ec802e4f9" name="update-test-feature" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="73b82f40f7f5da4ff8997ca2e856d280f69f4148eef3ed6c86167b2bf3ba9a3c" name="update-test-interactive" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="754ed57272ffa8e73d01d813a9c37bf81131b20f2796616b4f59cce5a1b37db9" name="update-test-interactive" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="8644ae864f7e99b2c84df21c2ae7afaa87a1eaebe2820d9f71c0bbd5aa386666" name="update-test-optional" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="ca996a6dd470740e9a59fd0f3c6d1bcf6d8678c65902657fc95e10ba4898704a" name="update-test-optional" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="b0ee398baac35b377c5e2523fbf8a13ac361f3ed7a27ea2a9f5ca9ee4f60ff9d" name="update-test-reboot-needed" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="3b13e6eee8427382cc529e499a7b94ffa10e345b957e521a5511ef211d1665d4" name="update-test-reboot-needed" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="e65770606a48324fb28515709ae4393f959f89aba325452cd1a442f7862cf87f" name="update-test-relogin-suggested" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="032392c8dcfe6e4b3b44d00ff785a9a02abbb84d61d73cd84720f028d82d8cc2" name="update-test-relogin-suggested" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="daf9fe250c8d9ba19436ed71f354dbb0a1dfcf9cf5d4d5095de3b22c410e0bbc" name="update-test-security" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="d97890af6bfc8551a745d0ee3b1eaedb8f87d6c71b5abbfd406cfd01ae9f1a32" name="update-test-security" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="9ebb591f6281ebe7bfd8e64d72d6a30b6eb55bfa2ca0f7535d52ed11fa2a392a" name="update-test-trivial" arch="i586">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="c74aeb4e8485b0a6fc15efab68f0afe8cd417a6b94e0879b97e5158eeb4b783d" name="update-test-trivial" arch="src">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="hmuelle@suse.de" date="1161172800">- created initial update-test-trival package for testing our update
  stack</changelog>
  <changelog author="mvidner@suse.cz" date="1162987200">- Added subpackages to test other kinds of patches.
- 1.1</changelog>
  <changelog author="hmuelle@suse.de" date="1165233600">- Fixed specfile to avoid locale issues (Müller -&gt; Mueller)</changelog>
  <changelog author="hmuelle@suse.de" date="1169035200">- Fixed specfile and downgrade version to 1.2
  99.9 is reserved for "universal updates testing" during beta
  cycles</changelog>
  <changelog author="lrupp@suse.de" date="1171540800">- specfile rewrite:
  + create the documentation files inline:
    (add version, release and date)
  + use get_version_number.sh and get_release_number.sh
    for "easier" preparing mbuild numbers
- version 1.3-0</changelog>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="10dc38689a53c7265d0d5f4f0a7191dfbbf8e4cd4bc9c354f0991f909f560ff5" name="update-test-trivial" arch="x86_64">
  <version epoch="0" ver="5.1" rel="lp151.12.1"/>
  <changelog author="dmueller@suse.de" date="1241524800">- add relogin-suggested subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1267185600">- add feature subpackage</changelog>
  <changelog author="lchiquitto@suse.de" date="1408622400">- improve description of packages and fix content of README files
- some minor fixes and clean-ups in the spec file</changelog>
  <changelog author="bbrunner@suse.com" date="1421668800">- Version bump</changelog>
  <changelog author="ro@suse.de" date="1423051200">- drop noarch
- add baselibs.conf</changelog>
  <changelog author="bbrunner@suse.com" date="1423051201">- moved 32bit-testpackage into separate subpackage</changelog>
  <changelog author="meissner@suse.com" date="1446033600">- renamed from update-test-trival to update-test-trivial</changelog>
  <changelog author="bbrunner@suse.com" date="1464004800">- Version bump (bsc#981107)</changelog>
  <changelog author="bbrunner@suse.com" date="1513771200">- Added subpackage which fails during update</changelog>
  <changelog author="bbrunner@suse.com" date="1525348800">- Version bump (bsc#1070228)</changelog>
</package>
<package pkgid="82d1463d7b58dab88bdcf2f59c13639ca649089e5fb640fe984edc61eca387c2" name="valgrind" arch="i586">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="2888592f3180b2f11c980f51c53b03661411d5d7e6d0d1c9b86b38c307b1c300" name="valgrind" arch="src">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="1a4af9933e100e8f4821ac71bb59bda93c16a2f7ed2f60a14c0ae5e1929f23e6" name="valgrind" arch="x86_64">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="af29acfab089b1cc57b7501e8ca25c1578c683476ea7ce3d765c60a159744565" name="valgrind-32bit" arch="x86_64">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="49c8a84749faef8071417578571437f67719d66590e732af96256fc1bf503dc1" name="valgrind-devel" arch="i586">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="8fd2ddf0c9e64a54afef60a248eb054911e841f0f51775fd9668af8c50cdf041" name="valgrind-devel" arch="x86_64">
  <version epoch="0" ver="3.15.0" rel="lp151.4.3.1"/>
  <changelog author="foss@grueninger.de" date="1482840000">- update to 3.12.0 (bsc#1017016, FATE#321455)
  * 3.12.0 is a feature release with many improvements and the usual
  collection of bug fixes. The full changelog can be found at
  http://valgrind.org/docs/manual/dist.news.html
  or
  /usr/share/doc/packages/valgrind/NEWS
- droped patches which are part of the release:
  gcc5.patch, r15702.diff, r15792.diff, r15802.diff, svn-r15766.patch,
  vex-r3197.diff, vex-r3210.diff, vex-r3213.diff</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add fix-ppcl64-clobber-list.patch: fix clobber list on ppcl64le,
  it's backport of upstream patch.</changelog>
  <changelog author="dmueller@suse.com" date="1498392000">- update to 3.13.0 (fate#321455):
  - remove fix-ppcl64-clobber-list.patch
  3.13.0 is a feature release with many improvements and the
  usual collection of bug fixes.
  See http://valgrind.org/docs/manual/dist.news.html</changelog>
  <changelog author="dmueller@suse.com" date="1509364800">- add epoll-wait-fix.patch (bsc#1064958)</changelog>
  <changelog author="olaf@aepfle.de" date="1519300800">- add valgrind.xen.patch to handle Xen 4.10 (fate#321394, fate#322686)</changelog>
  <changelog author="mbrugger@suse.com" date="1528459200">- ad Implement-emulated-system-registers.-Fixes-392146.patch (bsc#1086543)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535371200">- Fix missing debuginfo with current binutils, boo#1103239
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1535457600">- Filter out -m64 from optflags, breaks build of 32 bit parts
- Cleanup, remove suse_version &lt; 1100 conditionals
- Use %license for COPYING, COPYING.DOCS</changelog>
  <changelog author="dmueller@suse.com" date="1536840000">- valgrind.xen.patch: refresh</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1537876800">- valgrind truncates powerpc timebase to 32-bits (bsc#1109589).
  Fix-access-to-time-base-register-to-return-64-bits.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542801600">- update to 3.14.0 (bsc#1114575, FATE#326355):
  see http://www.valgrind.org/docs/manual/dist.news.html
  * The new option --keep-debuginfo=no|yes (default no) can be used to retain
    debug info for unloaded code.  This allows saved stack traces (e.g. for
    memory leaks) to include file/line info for code that has been dlclose'd (or
    similar).  See the user manual for more information and known limitations.
  * Ability to specify suppressions based on source file name and line number.
  * Majorly overhauled register allocator.  No end-user changes, but the JIT
    generates code a bit more quickly now.
  * Preliminary support for macOS 10.13 has been added.
  * mips: support for MIPS32/MIPS64 Revision 6 has been added.
  * mips: support for MIPS SIMD architecture (MSA) has been added.
  * mips: support for MIPS N32 ABI has been added.
  * s390: partial support for vector instructions (integer and string) has been
    added.
  * Helgrind: Addition of a flag
  - -delta-stacktrace=no|yes [yes on linux amd64/x86]
    which specifies how full history stack traces should be computed.
    Setting this to =yes can speed up Helgrind by 25% when using
  - -history-level=full.
  * Memcheck: reduced false positive rate for optimised code created by Clang 6
    / LLVM 6 on x86, amd64 and arm64.  In particular, Memcheck analyses code
    blocks more carefully to determine where it can avoid expensive definedness
    checks without loss of precision.  This is controlled by the flag
  - -expensive-definedness-checks=no|auto|yes [auto].
  * Valgrind is now buildable with link-time optimisation (LTO).  A new
    configure option --enable-lto=yes allows building Valgrind with LTO.  If the
    toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
    Note that if you are doing Valgrind development, --enable-lto=yes massively
    slows down the build process.
- remove epoll-wait-fix.patch,
  Fix-access-to-time-base-register-to-return-64-bits.patch,
  0001-Accept-read-only-PT_LOAD-segments-and-.rodata.patch (upstream),</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1542888000">- build against Toolchain module for SLE12
- add 0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch,
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch,
  0001-s390x-more-fixes.patch,
  Implement-emulated-system-registers.-Fixes-392146.patch (FATE#326355)
- enable check (poo#36751)</changelog>
  <changelog author="olaf@aepfle.de" date="1543147200">- update valgrind.xen.patch to branch bug390553-20181125-ddfc274b2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1544097600">- drop unreproducible unused .a files to make the package build
  reproducible (boo#1118163)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1547208000">- split into a -32bit subpackage, fix buildrequires for older distros</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1547640000">- Fix POWER9 addex instruction emulation (bsc#1121025).
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch</changelog>
  <changelog author="schwab@suse.de" date="1549713600">- Don't package files twice on ppc64</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1550577600">- add 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch (bsc#1124111)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133288).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1557316800">- update to 3.15.0 (fate#327402):
  3.15.0 is a feature release with many improvements and the usual collection of
  bug fixes.
  This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
  PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
  MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
  X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.  There is also preliminary
  support for X86/macOS 10.13 and AMD64/macOS 10.13.
  * ==================== CORE CHANGES ===================
  * The XTree Massif output format now makes use of the information obtained
  when specifying --read-inline-info=yes.
  * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
  * ==================== TOOL CHANGES ====================
  * DHAT:
  - DHAT been thoroughly overhauled, improved, and given a GUI.  As a result,
    it has been promoted from an experimental tool to a regular tool.  Run it
    with --tool=dhat instead of --tool=exp-dhat.
  - DHAT now prints only minimal data when the program ends, instead writing
    the bulk of the profiling data to a file.  As a result, the --show-top-n
    and --sort-by options have been removed.
  - Profile results can be viewed with the new viewer, dh_view.html.  When
    a run ends, a short message is printed, explaining how to view the result.
  - See the documentation for more details.
  * Cachegrind:
  - cg_annotate has a new option, --show-percs, which prints percentages next
    to all event counts.
  * Callgrind:
  - callgrind_annotate has a new option, --show-percs, which prints percentages
    next to all event counts.
  - callgrind_annotate now inserts commas in call counts, and
    sort the caller/callee lists in the call tree.
  * Massif:
  - The default value for --read-inline-info is now "yes" on
    Linux/Android/Solaris. It is still "no" on other OS.
  * Memcheck:
  - The option --xtree-leak=yes (to output leak result in xtree format)
    automatically activates the option --show-leak-kinds=all, as xtree
    visualisation tools such as kcachegrind can in any case select what kind
    of leak to visualise.
  - There has been further work to avoid false positives.  In particular,
    integer equality on partially defined inputs (C == and !=) is now handled
    better.
- remove 0001-Bug-385411-s390x-Add-z13-vector-floating-point-suppo.patch
  0001-Bug-385411-s390x-Tests-and-internals-for-z13-vector-.patch
  0001-Bug-397187-s390x-Add-vector-register-support-for-vgd.patch
  0001-Bug-399444-s390x-Drop-unnecessary-check-in-s390_irge.patch
  0001-Bug-400490-s390x-Fix-register-allocation-for-VRs-vs-.patch
  0001-Bug-400491-s390x-Sign-extend-immediate-operand-of-LO.patch
  0001-Bug-402519-POWER-3.0-addex-instruction-incorrectly-i.patch
  0001-Bug-403552-s390x-Fix-vector-facility-bit-number.patch
  0001-s390x-more-fixes.patch
  Implement-emulated-system-registers.-Fixes-392146.patch (all upstream)</changelog>
</package>
<package pkgid="82b31b14ea25ee1d20853483dfdfda9f0f7b912984ec6e1392c93049980023dd" name="vim" arch="i586">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="932d760461f4725a0d9ac2f4c4595608c7acab37d15651e564ba11d15ba66a9f" name="vim" arch="src">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="a4cbb608917c19b7f51233e2c7e263d5cd7a51a45eb8e867ec8782f2c6d6d01f" name="vim" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="177b9f2049efecd33f87d3938bd445365390825220cdc0b59a2904a001f15751" name="vim-data" arch="noarch">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="8702062d7ff703f00e52c94d52ea267cf671c7bed5a182a75a6303426d4d9168" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="8.0.1568" rel="lp151.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="f1d02c67523e142dd86fae01523f99d4579c235b77a88231d1abbc79b1b069e2" name="virt-v2v" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp151.4.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="e02aa1519e546e7086d7e9631b7618305b57c21d02225201171be276dd52c287" name="virtualbox" arch="src">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="baf091f3fae2d4300e0d408de5a1d1018e56f7452e27a1171e14b6fe586858ab" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="864b0cc512eb7eac26edaf8d3f06a6f26cdfe16043b0289128c9fa27f165dd72" name="virtualbox" arch="src">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="3dc9ae564f5eba592a6f4bfc5af7bd0a9a5757ba3b7bbc646334963a6ba5e1a9" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="92ac58880d19800c6d3a3a2558b12c78d87f65b7d8feff677ba2f7ad0ae2fb9a" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="87c20f4637bf30cf35197d3c390e273e99e92f1ed433ed105b8ffc83e2f55931" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="e2ae60416383c736fd1ae3bc0e5c81917b9015205736280c0ecff824dec95b8f" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="70b903fc3075b7718aee9c29e4789fb855a56aa0578bdc275c6c2599e58b6c1c" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="05a4ac2af3afc1288e1624a102255b30e7e111a86a6da0d57a89e127fd343f6c" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.0.10_k4.12.14_lp151.28.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="09a25dec5089e3b8765255fb0a0a9dfc11f1f654e50d2057c8aeab99a2a6e921" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.0.8_k4.12.14_lp151.27" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="6912da8fd39e10e4e79fdcf1a2cf746f3f267805de8c1fd863f50e2456ab5e38" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="5e673de113a1b9a0c28c77c2b2ee50f5330dfb2b0c2438cc3fd04c26c945f969" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="90e23c5db3250b0cc67ccd84a4995d2fd70d9be6bb4a9f37a2656e6c51b12d0e" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="22683959463262fc4668eb25e18c135d4f11a1aa3ab68f7a0ea6f6a66f45022c" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="b3064956807b953da9b2ce8031b0868503ffc04080e2fce324ab5acea954b097" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="b50768040004c397cc3a011c67acd20a20cc48567bbe3304bc8e2ab9baa6c24f" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="9c588b86297ea3d19ea34cfb9ee01eb967ef87a49d708c10c0cf39e25698faf4" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.0.10_k4.12.14_lp151.28.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="328b6a5970f386343d4da71e15f8c5aebac05a2dac796f69fc81e1d8ffe34cfb" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.0.8_k4.12.14_lp151.27" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="39a703e8f05d75e54185ba2886a49434b0850cd5e15c1ec2216809a67fa1370d" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="f5ef4992a6a852b002678fad5ae8e24d898eb3f8b5aeabd9d364d6152150ed1b" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="63f1d392d19ac10207669f9eca41e65391c36f3b49016c7917ae1f537aaf669c" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="4772d19ea672d4f674236279d7553cb0a44de58aeed4ecd8393fc6418df88762" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="c43080d44e68508f1e24396de39eb235a048a3decb2a0a51c759e3db1725b494" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="7bda092538ba4af135c7bc3f9fd3e76c195dd72f6259d43413175309a46aa939" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="e8a2a2d9f32f7faf24f0f9d6349b27783a27cb903343afb63dca2d70998b1b69" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="6.0.10" rel="lp151.2.6.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556539200">- LTO builds still failing. Reset flag to nil.
- Changed the way that the spec file limits the 32-bit builds to 2 threads. boo#1133492.
  If enough memory were allocated so that the full number of workers were allowed, the job would never be scheduled.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1556625600">- Limit all architectures to a maxium of 2 jobs. Without this restriction, 32-bit builds run
  out of memory, and 64-bit builds get strange crashes.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1557921600">- Modify "fixes_for_qt13.1" for i586 builds qith Qt 5.13</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Version bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1558958400">- separate vboxautostart.sh from vboxdrv.sh
- add vboxautostart.service
- clean up vboxdrv.sh
- fix build of vboxvideo kernel module by replacing the relative
  drm include patch with an absolute include path (with sed)
- build vboxvideo kernel module for openSUSE &gt;= 15.0
- apply fixes_for_Leap15.1.patch conditionally only
- add minimal patch fixes_for_Leap42.3.patch to build for 42.3
- fix path typo: %{_datadir}/pixmaps/virtalbox
  - &gt; %{_datadir}/pixmaps/virtualbox</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559044800">- Unused file "fix_LTO_builds.patch" removed.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1559217600">- Kernel 5.2, now in Kernel_HEAD_stardard, has some API changes. These are
  handled in the new file "fixes_for_5.2.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1560168000">- Fix build for SLE15 SP1 - add file "fixes_for_SLE15.patch"</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1562414400">- Fix Virtualbox for problem with stealing focus under Qt 5.13. File "fixes_focus_steal.patch" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563192000">- Revise instructions for case when VirtualBoxVM has the wrong privilege.
  Rework conditional code when applying patch for SLE15_SP1.
  File "fixes_for_SLE15.patch" deleted.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1563451200">- Version update to 6.0.10 (released July 16 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Various vulnerabilities are fixed (bsc#1141801) inclding
  CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863
  CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850
  User interface: fix issue inputing controller names (bug #11579)
  User interface: fix resize problems with recent Linux hosts (bug #18677)
  Serial: fixed guru meditation when raw mode is enabled (bug #18632)
  Serial: fixed possible VM crash under certain circumstances
  USB: Fixed "unrecoverable error" problems in OHCI emulation (bug #18593, 6.0.6 regression)
  USB: improve captured device identification
  VBoxManage: fix reversed reporting of audio input and output (thank you Socratis Kalogrianitis)
  VBoxManage: fix controlling recording for running machine (bug #18723)
  Guest control service: various fixes
  Linux hosts: kernel module build fixes for various kernels (bug #18316)
  Linux hosts: support UEFI secure boot driver signing on Ubuntu and Debian hosts (bug #11577)
  Linux hosts: fix focus grabbing problems with recent Qt versions (builds from source only; thank you Fabian Vogt (SUSE) and Larry Finger; bug #18745)
  Windows guests: many shared folders fixes
  Windows guests: fix other services failing if seamless mode was not available
  Linux guests: kernel module build fixes for various kernels (bugs #18677 and #18697; fixes by Larry Finger and Gianfranco Costamagna)
  Linux guests: do not try to load old versions of libcrypt on recent guests in Guest Additions tools (bug #18682)
  Linux guests: udev rules for guest kernel modules did not always take effect in time
  Linux guests/VMSVGA: do not forget the guest screen size after a guest reboot
  OS/2 guests: various shared folder fixes
  File "fixes_for_5.2.patch" is deleted - fixed upstream.
  File "fixes_for_5.3.patch" is added to handle API changes in kernel 5.3.
  File "fixes_for_Leap15.1.patch" is deleted - fixed upstream.</changelog>
</package>
<package pkgid="8eccfe0f173b51220a6e9f67a5204d45f7f1b76fcc8d7c16ae97a35c689a73c6" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="lp151.2.3.1"/>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548417600">- Converted vboxwebsrv to a systemd service. Previously, this was started through init.d. bsc#1116050
  Files "vboxweb-service.service" and "vboxweb-service.sh" are added.
  File "vbox-vboxweb-init-script.diff" is removed.
  File "fixes_for_4.20.patch" is removed - the code was fixed upstream.
  File "fix_lib_search.patch" is added to fix the build of VBox0GL.
  File "fixes_for_5.0.patch" is added to compensate for API changes in kernel 5.0.
  File "virtualbox-system-x.patch" is removed.
  File "fixes_for_Leap15.1.patch" is added to fix build errors on Leap 15&lt;F5&gt;.1.
- Version bump to 6.0.2 (released January 15 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed creation of desktop shortcuts for starting virtual machines (bug #18207)
  User interface: allow the first run window to selecting host drives (bug #18230)
  User interface: fixed attaching empty host optical drives (bug #18223)
  User interface: implemented a new virtual optical disk creation window
  USB: modified Linux backends to reset USB devices (previously, most guest attempts to reset USB devices were ignored)
  PCnet: fixed a regression which caused some PCnet PCI guest drivers to not detect the emulated hardware (bug #18286)
  Linux hosts: fixed conflict between Debian and Oracle build desktop files (bug #18264)
  Linux and MacOS hosts: VirtualBoxVM command not accessible (bug #18257)
  Windows guests: multiple monitor fixes with VBoxSVGA graphics
  Windows guests: black screen with VBoxSVGA graphics when 3D is disabled (bug #18205)
  Linux guests: fixed building drivers on SLES 12.4 (bug #18213)
  Linux guests: fixed building shared folder driver with older kernels (bug #18238)
  OS/2 shared folders: fixed write regression introduced in 6.0.0 GA</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548676800">- Version bump to 6.0.4 (released January 28 2019 by Oracle)
  Files "fixes_for_5.0" and "fixes_for_gcc9" are deleted - the code was fixed upstream.
  This is a maintenance release. The following items were fixed and/or added:
  Virtualization core: support Shanghai/Zhaoxin CPUs.
  User interface: handle command line arguments to VirtualBox correctly (bugs #18206 and #18197)
  User interface: improvements to machine manager window, virtual optical disk creator, storage selector window and log viewer window
  User interface: various small fixes and improvements
  Audio: implemented time scheduling for the AC'97 device emulation to keep audio and video in sync
  Graphics: basic support for VMSVGA graphics device in virtual machines using EFI
  Network: fix occasional NATNet crashes (bug #13899)
  Network: worked around problems in certain PCnet drivers on old operating systems
  Serial: fixed connecting to pseudo terminals on POSIX hosts (6.0.0 regression; bug #18319)
  Linux hosts and guests: fix for building kernel modules against Linux 5.0. Thank you Kyle Laker</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548763200">- Part of the API changes for kernel 5.0 are not fixed upstream. Add file "fixes_for_5.0" back in.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1548936000">- Add changes requested by Security - new file "security_fixes.patch"
  File UserManual.pdf is resent to clear error in build.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549886400">- Fix virtualbox wrapper script virtualbox-wrapper.sh to check
  60-vboxdrv.rules in /usr/lib/udev/rules.d, not /etc/udev/rules.d
  Logic is still flawed, until it doesn't take both locations into
  account
- Add custom /etc/permission.d/virtualbox{,.paranoid} definitions
- Add compatibility symlink to keep old desktop links functional</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1549972800">- Add setBadness('permissions-unauthorized-file',333) to rpmlintrc
- Remove suid attributes from all files
- add libgsoap version dependency &gt;= 2.8.50 (recv_maxlength)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1550664000">- Remove requires on libvncserver for virtualbox-vnc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553083200">- Fix API changes for kernel 5.1.0 - add file "fixes_for_5.1.patch".</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1553774400">- Fix build with the pending Qt 5.13. File "fixes_for_qt5.13.patch" is added. bsc#1130503</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1553947200">- add patch to stop UI messing with Highlight Color for background
- apply fixes_for_qt5.13.patch for Qt versions &gt;= 5.13.0 only</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1554033600">- adjust patch virtualbox-fix-ui-background-color.patch to really
  fix the background color messing...</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465600">- Fix file "fixes_for_qt5.13.patch" - macro QT_VERSION_CHECK is not available for Qt &lt; 5.13.
  Substitute the equivalent (qtmajor &lt;&lt; 16 + qtminor &lt;&lt; 8).</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1554465601">- Fix problems with use of files "virtualbox.permissions" and "virtualbox.permissions.paranoid" - they are deleted
  Removed setBadness line from virtualbox-rpmlinc.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555243200">- An instance of /usr/lib/virtualbox/VirtualBoxVM being installed without SUID privilege
  has been reported as boo#1132379. Unfortunately, the error message thrown by VB in this
  case is rather opaque. To help the user recover, the wrapper /usr/bin/VirtualBox has
  been modified to check the permissions and pop up a warning describing the problem and
  showing the command needed to fix the problem. File "vbox-suid-warning.diff" is added.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555502400">- The VirtualBox packages for both Tumbleweed and Leap 15.1 are now derived from the sources in Factory;
  however, the underlying kernels are very different in that vboxvideo.ko is built-into the TW kernel,
  thus the package did not try to build that module. The result is that Leap 15.1 guests have only 640x480
  resolution (boo#1132439). These changes conditionally turn building of the kernel module back on. As TW
  does not need the module, it is only built for Leap 15.1.</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555588800">- Version bump to 6.0.6 (released April 17 2019 by Oracle)
  The following files in the openSUSE implemetation are removed: "fix_32_bit_builds.patch", "fixes_for_5.0.patch", and
  "fixes_for_5.1.patch". These issues are fixed upstream.
  This is a maintenance release. The following items were fixed and/or added by Oracle:
  Virtualization core: nested AMD virtualization fixes
  User interface: fixed copying directories in file manager
  User interface: fixed operation progress in file manager when copying content
  User interface: fixed operation progress when deleting snapshots
  User interface: fixed unattended installation of recent Ubuntu guests
  User interface: various additional improvements
  Storage: fixed loading saved states for LsiLogic devices (6.0.0 regression; bug #18263)
  Storage: fixed fixed reading certain QCOW2 images and support version 3 of the format readonly
  Storage: Improved IDE PCI emulation to allow NetWare IDE drivers to use bus-mastering
  Graphics: Improved VMSVGA support to work with old X servers which previously showed only a badly scrambled screen
  Graphics: fixed invisible mouse cursor with VMSVGA emulation and without mouse integration (bug #18239)
  Graphics: make EFI work with VMSVGA emulation (bug #18282)
  Graphics: remember last guest screen size VMSVGA emulation
  Graphics: fix RDP to guests using VMSVGA emulation
  Graphics: various additional VMSVGA emulation fixes
  Audio: implemented audio device enumeration for the DirectSound backend
  Network: fixed unwanted padding bytes in Windows host adaptor network packets (bug #18202 and bug #18355)
  Serial: fixed possible crash on Windows when using a host device (6.0.0 regression; bug #18319)
  Serial: fixed loopback handling in the emulation causing garbage to be sent during boot with Linux guests (6.0.0 regression; bug #18319)
  Shared folders: fixed duplicate folders after restoring a saved state (bug #18373 and other)
  Drag and drop: fixed copying files from guest host (bug #18305)
  Recording: fixed modifying settings via VBoxManage (bug #18494)
  VBoxManage: crash fix (bug #18341)
  Fixed hangs during failed virtual machine start-up
  Linux host and guest: support Linux 5.0 and 5.1, thank you Valdis Kletnieks (see also bug #18515)
  Linux host: support kernel 4.4.169 (bug #18315)
  Linux host: fix logging when building Linux kernel modules (bug #18226)
  Linux host: clarified building Linux host drivers with secure boot (bug #18312)
  Installers: reduced size of packages
  Web services: work with Java 11
  LibreSSL compilation fix, thank you Stefan Strogin
  Windows guests: fixed running applications which use complex display topologies with WDDM driver, fixed Skype for Business hangs (bug #17092)
  Windows guests: fixed an occasional guest crash with WDDM driver and VBoxSVGA adapter (bug #18369)
  Windows guests: shared folder file creation detection issue (bug #9276)
  Linux guests: shared folder performance and reliability improvements and missing features (bugs #17360, #819)
  OS/2 guests: shared folder fixes (bug #18376 and bug #18379)</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1555675200">- Updated file "Fixes_for_Leap15.1.patch" to handle one addition problem due to backporting of kernel APIa.
  Remove "BuildRequires: quilt" - that package is not needed.
  VirtualBox 6.0.6 fixes the following: CVE-2019-2656, CVE-2019-2680, CVE-2019-2696, CVE-2019-2703, CVE-2019-2721,
    CVE-2019-2722, CVE-2019-2723, CVE-2019-2657, CVE-2019-2690, CVE-2019-2679,
    CVE-2019-2678, and CVE-2019-2574 boo#1132827.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133289).</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1558008000">- Viersion bump to 6.0.8 (released May 13 2019 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  Core: fix saved state resume failures (bugs #18265 and #18331)
  User interface: show full file location in New Medium window.
  User interface: fix mouse click pass-through problems in multi-screen virtual machines (6.0.6 regression, bug #18567)
  Graphics: fixed a crash when powering off a VM without graphics controller (bug #18570)
  API: partial fix for dealing with VM config conflicting with other VMs related to medium UUIDs, now correctly flags VM as inaccessible (bug #17908)
  Linux hosts: fix kernel module build breakage in non-default build set-ups (bug #18620, thank you Ambroz Bizjak)
  Linux hosts: fix kernel module build breakage in debug build set-ups (bug #18621, thank you Ambroz Bizjak)
  Windows guests: notice file size increases in shared folders which were missed in certain cases
  Linux guests: make shared folders work with Linux 3.16.35
  Linux guests: fix incorrectly read-only shared folders (bug #18345)</changelog>
</package>
<package pkgid="e38e0e5d3b564be5bfe1eea3273dbf276820f93b5483ca6105bedc4c8203e2e6" name="vlc" arch="src">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="44632abaf95ff71ae25eb89e59a7e6ff15c680bf437582bd15cbb3ad7b47fce5" name="vlc" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="9d530be59b3cbd2f674b3c3be5741b9e97174f4df2b57675b4b66a1fb9b7f4fd" name="vlc-codec-gstreamer" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="1803f8932cf75a9b7a8fa731a4fb8892bc7f744d9862576aecfa74698def2b06" name="vlc-devel" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="e1df2633c1b3a9d0429c677232256ba83358bee026c8c043f2d2a24f82007323" name="vlc-jack" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="b287850ca633b125ba6ce2ce68c919ff82f1bfb0154e7e338ff07e05d33553c2" name="vlc-lang" arch="noarch">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="f06e114359f12ab0efcb753c76bb35b72c4cc5571d0371e2482540147d146e3f" name="vlc-noX" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="7911ca2aaec7480fe3151a55be7348994631e35e64300eb150f323f6ba46a806" name="vlc-qt" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="ee5dd005c1b45c6fdd150fb1ee924add0267617434db708ad4da164aea9020c6" name="vlc-vdpau" arch="x86_64">
  <version epoch="0" ver="3.0.7.1" rel="lp151.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1527681600">- Fix version dependency for libbluray (&gt;= 0.6.2).</changelog>
  <changelog author="dimstar@opensuse.org" date="1527681601">- Simplify projectM condition: available on all openSUSE versions.
- Enable chromaprint only on openSUSE.
- For now build without wayland on SLE15: dependencies need to be
  chased up.</changelog>
  <changelog author="dimstar@opensuse.org" date="1527768000">- Update to version 3.0.3:
  + Core: Update subtitles display while paused.
  + Access: Enable srt support on binary builds.
  + Decoders:
  * Allow videotoolbox hardware decoding to be disabled
  * Disable VideoToolbox for 10bits H.264
  * Fix VideoToolbox with some invalid HEVC streams
  * Fix subsdec wide character support
  * Fix 1st order Ambisonics in AAC
  + Demux:
  * Miscellaneous ogg improvements &amp; bugfixes, including oggds
  * Fix forced tracks selection
  * Fix Topfield files
  * Probe AAC/ADTS inside TS
  * Fix tracks detection issues with DolbyVision and Bluray streams
  + macOS:
  * Fix "Open Network Stream" URL box focus
  * Add option to disable hardware acceleration for video decoding
  * Remove option to force dolby mode from simple preferences
  + Video Output: Fix crashes on Direct3D11
  + Qt:
  * Fix tooltip display on some desktop environments
  * Fix spurious movement of the main Window
  * Fix playlist being displayed in fullscreen
  + Misc:
  * Fix amem output
  * Fix numerous issues on fonts fallback and font shaping
  * Fix subtitles toggle through hotkeys
  * Fix audioscrobbling
  * Fix buffer over-read in avcodec audio encoding with non-default layouts
  * Numerous 3rd party libraries updated, fixing security issues
  + Updated translations.
- Drop 0001-Update-czech-translation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1529928000">- Require(post) vlc-noX for the -qt, -codecs, -jack and -vdpau
  sub-package: all those packages execute vlc-cache-gen
  (boo#1094893).</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Move plugins that link X-libraries from vlc-noX to vlc.</changelog>
  <changelog author="hpj@urpla.net" date="1531828800">- fix last change for openSUSE &lt; 1500
  conditionally include libglconv_vaapi_wl_plugin.so only</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1538395200">- Update to version 3.0.4:
  + Decoder:
  * Blacklist some intel GPU when decoding HEVC
  * Decode AV1 streams
  * Fix playback of low-fps files
  * Fix hardware decoding of low-latency sliced H.264 streams on macOS
  * Fix seeking with streams containing WebVTT subtitles
  * Fix decoding some CC-608 streams with roll-up
  * Fix crashes with LPCM streams
  * Fix colorspace of JPEG, PNG and screen inputs
  * Fix MediaCodec rotation handling
  + Demux:
  * Improve FLV fps detection
  * Fix some ogg/flac
  * Improve support for broken HEVC inside MKV
  * Fix some AVI regression for broken files and for DVAudio
  * Support files splitted in the .mts%d pattern
  * Fixes for MKV seeking
  * Fix for MP4 disabled track selection
  * Fix playback of incomplete RAR files (downloading)
  + Audio Output:
  * Improve iOS session management and resume-from-pause
  * Improve macOS audio performance
  * Support 44.1kHz DTS passthrough
  * Fix crashes on DirectSound output
  + Video Output:
  * Fix some crash in Direct3D11/Direct3D9 because of sensors
  * Fix some broken DVD subtitles rendering (OpenGL, notably)
  * Fix crashes on old mac machines, after some time
  * Fix memleaks on the EGL output (Android notably)
  * Fix misc display in Direct3D11 due to broken drivers
  * Fix potential green screen on Windows XP
  + Text renderer:
  * Fix rendering of arabic fonts fallback on macOS
  * Fix head buffer overflow on macOS with some fonts
  * Fix rendering of fonts with specific fonts
  * Fix some RTL rendering
  + Misc:
  * Fix live555, macOS-UI, screen capture crashes
  * Change the extension registration names on Windows
  * Fix VLM 'now' date
  * Fixes on the HTTPD server
  * Fix on the NTservice registration
  * Fix --stop-time option
  * Fix ChromeCast compatibility with web interface
  * Fix subtitles alignment
  * Fix infinite recursion on directory playback
  * Fix detection SAT&gt;IP servers
  + Qt: Fix tooltip display when using Wayland
  + Updated translations
- Drop vlc-qt-5.11.patch: fixed upstream.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to version 3.0.5 (CVE-2018-19857, boo#1118586):
  + Access:
  * Improve RTSP playback
  * BluRay fixes and improvements, notably for menus and seeking
  * Improve the UDP/RTP truncated issue
  + Codec:
  * Add a new AVI decoder based on the davld library
  * Enable libaom decoder by default
  * Fix decoding of some HEVC streams with macOS hardware decoding
  + Demux:
  * MP4: Fix reading of some HDR metadata
  * Miscellaneous AV1 demuxing improvements
  * Fix CAF integer-underflow
  * Fix an MKV crash on iOS 12.0 on iPhone XS phones
  + Packetizer:
  * Add an AV1 packetizer
  + Audio output:
  * Fix corking when the playback state is paused
  * Improve corking on Android
  + Video Output:
  * Fix Direct3D11 tone-mapping when HDR is displayed on SDR screen
  * More accurate colors for SD sources in Direct3D11
  * Disable hardware decoding on some old Intel GPUs
  * Fix zero-copy GPU acceleration on AMD RX Vega
  * Misc Direct3D11 fixes
  + Miscellaneous
  * Improve ChromeCast
  * Update numerous 3P libraries, including for minor security issues
  * Update YouTube support
  * Fix subtitles rendering with specific fonts with negative HA</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546516800">- Add support for Chromecast discovery with Avahi. The current upstream
  implementation uses microdns, which is not available in openSUSE, and
  would also cause problems (2 mDNS implemenations running concurrently).
  * Add 0001-Fix-leaking-AvahiServiceResolver-in-the-error-paths.patch
  * Add 0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch
- Spec file cleanup, remove obsolete suse_version checks</changelog>
  <changelog author="seanlew@opensuse.org" date="1547121600">- Update to version 3.0.6:
  + Core:
  * Fix potential subtitle picture allocation failures
  + Codec:
  * Add support for 12 bits decoding of AV1
  * Fix HDR support in AV1 when the container provides the metadata</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1549972800">- Add fix-build-with-fdk-2.0.patch to fix building vlc with
  libfdk-aac v2
- Add 0001-codec-vpx-Detect-libvpx-1.8.0.patch to fix building vlc
  with libvpx 1.8.0
- Add the libx26410b_plugin.so codec plugin when building with
  BUILD_ORIG</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Move vdpau sub-package and it's dependencies out of BUILD_ORIG
  conditional, everything it needs is provided by openSUSE.
- Refresh patches with refresh_patches service.
- Drop BUILD_ORIG guarded faad2-devel and libfaac-devel
  BuildRequires and stop passing conditional --enable-faad to
  configure, libfdkaac is sufficient for aac encoding/decoding.
- Add pkgconfig(aom), pkgconfig(libnfs) and pkgconfig(soxr)
  BuildRequires, build the codecs/filters/plugins.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1551787200">- Limit the use of projectM-qt5 to suse_version &gt; 1320 &lt; 1550.
  On Tumbleweed, we now have projectM 3.1.0, which is equivalent
  to what our projectM-qt5 used to be.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552737600">- Add conditional pkgconfig(dav1d) BuildRequires: build av1
  decoding via dav1d decoder.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1553083200">- Add vlc-libssh2-ECDSA-version.patch: sftp: fix version for ECDSA
  known hosts (fixes vlc#22060).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133290).</changelog>
  <changelog author="olaf@aepfle.de" date="1556798400">- The license of fdk-aac is not GPL compatible, therefore this pkg
  can not possibly be built with fdk-aac by default
  To gain fdk-aac support, recompile it at home and keep it there
- Restore code to handle faad</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1558008000">- Require vlc-noX instead of full vlc in vlc-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560513600">- Update to version 3.0.7.1 (CVE-2019-5439, CVE-2019-5459,
  CVE-2019-5460, CVE-2019-12874, boo#1138933, boo#1143549, boo#1138354, boo#1143547)
  + Access: Update libbluray to 1.1.2.
  + Video Output:
  * Fix hardware acceleration with some AMD drivers
  * Improve direct3d11 HDR support
- Changes from version 3.0.7:
  + Access:
  * Improve Blu-ray support
  * Fix sftp module build with libssh &gt;= 1.8.1
  + Audio output:
  * Fix pass-through on Android-23
  * Fix DirectSound drain
  + Demux: Improve MP4 support
  + Video Output:
  * Fix 12 bits sources playback with Direct3D11
  * Fix crash on iOS
  * Fix midstream aspect-ratio changes when Windows hardware decoding is on
  * Fix HLG display with Direct3D11
  + Stream Output: Improve Chromecast support with new ChromeCast apps
  + Misc:
  * Update Youtube, Dailymotion, Vimeo, Soundcloud scripts
  * Work around busy looping when playing an invalid item with loop enabled
  + Updated translations.
- Drop vlc-libssh2-ECDSA-version.patch and 0001-codec-vpx-Detect-libvpx-1.8.0.patch: fixed upstream
- Rebase patches/0002-Add-Avahi-implementation-for-chromecast-renderer-dis.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564574400">- Add vlc-CVE-2019-13602_1.patch and vlc-CVE-2019-13602_2.patch:
  fix integer underflow in mp4 demuxer (CVE-2019-13602,
  boo#1141522).
- Add vlc-CVE-2019-13962.patch: codec: avcodec: fix broken check
  before copy (CVE-2019-13962, boo#1142161).</changelog>
</package>
<package pkgid="12fe20280890c84a2e70dce6d4b882dc40272fab03a7bdc916af6e8b7137f739" name="webkit-jsc-4" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="d429a30a7758eb9337374a0eeca5448c950ed9f8020bcf3bcfdbd301c652ee4f" name="webkit-jsc-4" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="3d54540a23dff6fdb45953dbb655688a6a2e34885a064c5cc76a175153a81c3c" name="webkit2gtk-4_0-injected-bundles" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="fad5327d0b081edc626d5727fc7f943488cb9333f1f7d8e16048c8bf9cdf728b" name="webkit2gtk-4_0-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="cad017d1be27d7894c5496239c64670d0942cdae003acac67ec2da159dd001b7" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="cec5fd554c30b946b12bf04d2272566c7d81c48fcc7b424738f2cda1b84ff0f7" name="webkit2gtk3-devel" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="cf2b2445460f2289b2ab923f084e57936d7cf35e5a5fba82e8d032cb6cbbc35f" name="webkit2gtk3-devel" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="511c85969c6d5fd52cebe3162136292aa6bc3e297936e6f8a3e4c99936edb9ee" name="webkit2gtk3-minibrowser" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="7d23433e7e3b54a22fe23f3198de361f02a615026c860d55e609499643994aad" name="webkit2gtk3-minibrowser" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="0a349d8b14bd6104158d73be070f47a283311dc553c4364805e87eecbf82fd56" name="webkit2gtk3-plugin-process-gtk2" arch="i586">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="fcbb54a565ef1857ce45a5596dc28faa124a3c372d9b5b52784aca9e49e4e74c" name="webkit2gtk3-plugin-process-gtk2" arch="x86_64">
  <version epoch="0" ver="2.24.2" rel="lp151.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1538654400">- Integrate changes needed for SLE 12 / leap 42.3:
  + depend on gcc7-c++, and pass appropriate executables to cmake.
  + Disable web crypto API: libgcrypt is too old.
  + Define USE_GSTREAMER_GL=FALSE: needs gstreamer 1.10.0 or newer.
- disable libwoff2 for SLE 15/12 and Leap 15/42.3, since it is not
  available there.</changelog>
  <changelog author="mgorse@suse.com" date="1539259200">- Re-enable building with python 3 for SLE/Leap 15 and Tumbleweed
- Update webkit2gtk3-python3.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540814400">- Update to version 2.22.3:
  + Many improvements and fixes for video playback with media
    source extensions (MSE), which improve the user experience
    across the board, and in particular for playback of WebM
    videos.
  + Fix a memory leak during media playback when using playbin3.
  + Fix portions of Web views not being rendered after resizing.
  + Fix Resource Timing reporting for &lt;iframe&gt; elements.
  + Fix the build with the remote Web Inspector disabled.
  + Fix the build on ARMv7 with NEON extensions.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4345, CVE-2018-4386.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1542024000">- Update _constraints to latest values to avoid OOM erros</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542888000">- Update to version 2.22.4 (boo#1116998):
  + Expose ENABLE_MEDIA_SOURCE as a public build option.
  + Fix a crash when using Cairo versions between 1.15 and 1.16.0
  + Fix the build with -DLOG_DISABLED=0.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF.
  + Fix debug builds of JavaScriptCore.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4372.</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Reduce memory constraints for riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1544184000">- Disable media source extension on SLE/Leap 15 and earlier, since
  it requires gstreamer 1.14.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545048000">- Update to version 2.22.5:
  + Improved the logic to determine for which architectures to
    enable the JIT compiler support and USE_SYSTEM_MALLOC at build
    time.
  + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF.
  + Fix several crashes.
  + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438
    (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442
    (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464
    (boo#1119558).</changelog>
  <changelog author="schwab@suse.de" date="1545825600">- Don't use gold on ppc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545825601">- Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated
  2d canvas support, we already build the needed support in cairo.
- Switch to Ninja build, add ninja BuildRequires and pass GNinja to
  cmake and use ninja_build and ninja_make macros.</changelog>
  <changelog author="mgorse@suse.com" date="1546430400">- Drop webkitgtk-typelib-sharelib-link.patch: there is no
  JavaScriptCore.gir.in file to be patched anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 2.22.6 (boo#1124937):
  + Make kinetic scrolling slow down smoothly when reaching the
    ends of pages, instead of abruptly, to better match the GTK+
    behaviour.
  + Fix Web inspector magnifier under Wayland.
  + Fix garbled rendering of some websites (e.g. YouTube) while
    scrolling under X11.
  + Fix several crashes, race conditions, and rendering issues.
- CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215,
    CVE-2019-6216, CVE-2019-6217,
    CVE-2019-6226, CVE-2019-6227,
    CVE-2019-6229, CVE-2019-6233,
    CVE-2019-6234, CVE-2019-6201,
    CVE-2019-7285, CVE-2019-7292,
    CVE-2019-8503, CVE-2019-8515.</changelog>
  <changelog author="mgorse@suse.com" date="1550059200">- Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch
  proposed for webkit#188599. The original patch didn't always
  prevent crashes.</changelog>
  <changelog author="mgorse@suse.com" date="1553083200">- Update to version 2.24.0:
  + Added support fot content filtering.
  + Variation fonts support.
  + Fully emoji rendering support.
  + Added navigation and pinch zoom gestures for touchpads.
  + Support for JPEG2000 images.
  + Script dialogs are now modal to the current web view only.
  + New API to convert URI to format for display.
  + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506,
    CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
    CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563.
- Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New
  dependencies.
- Drop webkit2gtk3-python3.patch: Not needed anymore.
- Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow
  upstream default.</changelog>
  <changelog author="mgorse@suse.com" date="1553601600">- Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on
  SLE/Leap 15 (webkit#196178).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 2.24.1 (boo#1132256):
  + Do not allow changes in active URI before provisional load
    starts for non-API requests.
  + Stop the threaded compositor when the page is not visible or
    layer tree state is frozen.
  + Use WebKit HTTP source element again for adaptive streaming
    fragments downloading.
  + Properly handle empty resources in
    webkit_web_resource_get_data().
  + Add quirk to ensure outlook.live.com uses the modern UI.
  + Fix methods returing GObject or boxed types in JavaScriptCore
    GLib API.
  + Ensure callback data is passed to functions and constructors
    with no parameters in JavaScriptCore GLib API.
  + Fix rendering of complex text when the font uses x,y origins.
  + Fix sound loop with Google Hangouts and WhatsApp notifications.
  + Fix the build with GStreamer 1.12.5 and GST GL enabled.
  + Detect SSE2 at compile time.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-6251, CVE-2019-11070.
- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1555329600">- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133291).</changelog>
  <changelog author="mgorse@suse.com" date="1560945600">- Update to version 2.24.2 (boo#1135715):
  + Fix rendering of emojis copy-pasted from GTK emoji chooser.
  + Fix space characters not being rendered with some CJK fonts.
  + Fix adaptive streaming playback with older GStreamer versions.
  + Set a maximum zoom level for pinch zooming gesture.
  + Fix navigation gesture to not interfere with scrolling.
  + Fix SSE2 detection at compile time, ensuring the right flags
    are passed to the compiler.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
  + Updated translations.
- Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream.
- Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build
  (webkit#198080).</changelog>
  <changelog author="mgorse@suse.com" date="1561204800">- Add webkit2gtk3-bug196440-build-fix.patch and
  webkit2gtk3-bug198080-build-fix.patch: fix build failures on
  SLE/Leap 15 and SLE 12.</changelog>
</package>
<package pkgid="8ec860972f3e039ab2d8c32c41a3061dcd17afeb3d75d77dcecdf9231ea35e15" name="wireless-regdb" arch="noarch">
  <version epoch="0" ver="2019.03.01" rel="lp151.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 2018.05.31 (boo#1106528):
  * Fix power limit in 5725-5785 GHz rule for France</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547121600">- Update version to 2018.10.24 (boo#1121466):
  * remove dependency to python attr
  * Sync DE with ETSI EN 301 893 V2.1.1
  * Sync FR with ETSI EN 301 893 V2.1.1
- Changes for version 2018-09-07:
  * update source of info for CU and ES
  * update regulatory rules for Switzerland (CH), and Liechtenstein
  * Update regulatory rules for Finland (FI) on 5GHz (SRD devices)
  * update rules for Hungary (HU) on 2.4/5/60G, 5725-5875MHz</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1557144000">- Update to version 2019.03.01 (boo#1134213):
  * Sync IN with G.S.R. 1048(E)
  * Update regulatory rules for Sweden (SE) on 2.4/5/60 GHz
  * update 60ghz band rules for us
  * Add 5725-5875 MHz rule for Portugal (PT)
  * add URLs in README
  * delete outdated comment for DE</changelog>
</package>
<package pkgid="b52c7eed751ccd6c774b167cf38d813f6a78e8367103fb200ddc8167d36399ab" name="wireless-regdb" arch="src">
  <version epoch="0" ver="2019.03.01" rel="lp151.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 2013.10.11
- remove bogus Requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385553600">- version 2013.10.11 upstream tarballs were incorrectly generated
  and contained an invalid regulatory database, update to version
  2013.11.27 in which the problem has been corrected.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410091200">- Update to 2014.06.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 2018.05.31 (boo#1106528):
  * Fix power limit in 5725-5785 GHz rule for France</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547121600">- Update version to 2018.10.24 (boo#1121466):
  * remove dependency to python attr
  * Sync DE with ETSI EN 301 893 V2.1.1
  * Sync FR with ETSI EN 301 893 V2.1.1
- Changes for version 2018-09-07:
  * update source of info for CU and ES
  * update regulatory rules for Switzerland (CH), and Liechtenstein
  * Update regulatory rules for Finland (FI) on 5GHz (SRD devices)
  * update rules for Hungary (HU) on 2.4/5/60G, 5725-5875MHz</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1557144000">- Update to version 2019.03.01 (boo#1134213):
  * Sync IN with G.S.R. 1048(E)
  * Update regulatory rules for Sweden (SE) on 2.4/5/60 GHz
  * update 60ghz band rules for us
  * Add 5725-5875 MHz rule for Portugal (PT)
  * add URLs in README
  * delete outdated comment for DE</changelog>
</package>
<package pkgid="81bfe8ff4f28a4921ed600816da05cf2c3a576f4fdc21a0bbee55270568ac05c" name="wireshark" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="66afdcab4538fd3147df6cdcd2d64079009cd1c56c9b8251d3eec27def40a170" name="wireshark" arch="src">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="27aed5af06a0ecbd59d5af2cb7b0c9a88e3ff6db1e6f49676cd6ec89bb3f91eb" name="wireshark" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="30efe974bd49b52bbc97c645bb759d7e3a261963420c709984cfeced0756806b" name="wireshark-devel" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="0d3273c5828591f94cbcb35e38f37a91e258be6c1829b353b28f04f6a7b82d3b" name="wireshark-devel" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="d6dcb2f922d8734672d2e1a3f2186c0fbcc4b02adb13ac394af474e5cdb895e4" name="wireshark-plugin-libvirt" arch="i586">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="8d4d5591c1b6806b66537cb9724754c3995547954dbbe0c37cdcf86f912daa27" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="5.1.0" rel="lp151.7.3.1"/>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1550577600">- qemu: don't use CAP_DAC_OVERRIDE capability if non-root
  620d9dd5-qemu-no-dac-override-nonroot.patch
  boo#1125665</changelog>
  <changelog author="jfehlig@suse.com" date="1551268800">- spec: disable VirtualBox driver</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551700800">- Update to libvirt 5.1.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    11c8aca9-libxl-set-mem-after-balloon.patch,
    70c2933d-apparmor-named-profiles.patch,
    a3ab6d42-apparmor-conv-libvirtd-named-profile.patch,
    b6440119-qemu-conf-sev.patch,
    a404ac34-qemu-cgroup-sev.patch,
    6fd4c8f8-qemu-domain-sev.patch,
    17f6a257-security-dac-sev.patch,
    a2d3dea9-qemu-caps-dac-override-sev.patch,
    620d9dd5-qemu-no-dac-override-nonroot.patch
  - jsc#SLE-3887, jsc#SLE-4480, jsc#SLE-4577</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873600">- apparmor: fix more fallout from changing libvirtd profile to a
  named profile
  4ec3cf9a-apparmor-rules.patch,
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch
  boo#1125841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1551873601">- qemu: s390: show correct CPU status after guest crash
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  bsc#1127841</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552305600">-  util: skip RDMA detection for non-PCI network devices
  f38ef0fa-no-RDMA-check.patch
  bsc#1112182</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478400">- Replace patches with upstream variants
  Old:
  0001-apparmor-Check-libvirtd-profile-status-by-name.patch,
  0001-qemu-Fix-query-cpus-fast-target-architecture-detecti.patch
  New:
  411cdaf8-apparmor-check-profile-name.patch,
  696239ba-qemu-fix-query-cpus-fast.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478401">- conf: add new 'xenbus' controller type
  09eb1ae0-conf-add-xenbus-controller.patch
- libxl: support Xen's max_grant_frames setting with maxGrantFrames
  attribute on the xenbus controller
  fb059757-libxl-add-xenbus-controller.patch,
  ec5a1191-libxl-support-max-grant-frames.patch,
  5a64c202-xenconfig-support-max-grant-frames.patch
  bsc#1126325</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478402">- libxl: change autoballooning default to disabled
  suse-libxl-disable-autoballoon.patch
  jsc#SLE-3059</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552478403">- hook: encode incoming XML to UTF-8 before passing to lxml etree
  fromstring method
  Modifed suse-qemu-domain-hook.py
  boo#1123642</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1552651200">- supportconfig: collect rotated logs in /var/log/libvirt/*
  Modified libvirt-supportconfig
  bsc#1124667</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1553169600">- apparmor: reintroduce upstream lxc mount rules
  Drop apparmor-no-mount.patch
  bsc#1130129</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1554465600">- CVE-2019-3886: disallow virDomainGetHostname and virDomainGetTime
  for read-only connections and users
  CVE-2019-3886-api.patch, CVE-2019-3886-remote.patch
  bsc#1131595</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1556193600">- Revert commits 5f1e6a7d and f6c5babb to avoid loading conntrack
  module at libvird start
  revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229</changelog>
  <changelog author="Bruce Rogers &lt;brogers@suse.com&gt;" date="1557921600">- cpu_map: add cpu feature md-clear. CVE-2018-12126,
  CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  538d8735-cpu_map-Define-md-clear-CPUID-bit.patch
  bsc#1111331
  bsc#1135273</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353600">- CVE-2019-10132: admin: reject clients unless their UID matches
  the server UID
  CVE-2019-10132-admin-reject-clients.patch,
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch,
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch
  bsc#1134348</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558353601">- cpu: add tests for md-clear feature
  Updated 538d8735-cpu_map-Define-md-clear-CPUID-bit.patch and
  added 5cd9db3a-cputest-add-data-E3-1225-v5.patch
  bsc#1135273</changelog>
  <changelog author="Jim Fehlig &lt;jfehlig@suse.com&gt;" date="1558612800">- spec: add systemd-container dependency to qemu and lxc drivers
  bsc#1136109</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1558699200">- network: delay global firewall setup if no networks are running
  9f4e35dc-network-improve-chain-create-error-report.patch,
  686803a1-network-split-ipv4-ipv6-chains.patch,
  c1c235eb-nework-clear-cached-error.patch,
  4330d138-network-refactor-global-chains.patch,
  3b66bd9a-add-debug-chain-creation.patch,
  c6cbe187-network-delay-global-fw-setup.patch,
  Dropped patches: revert-7431b3eb.patch, revert-8b967198.patch
  bsc#1133229
- Renamed patches to include commit id:
  CVE-2019-10132-admin-reject-clients.patch -&gt;
  96f41cd7-admin-reject-clients.patch
  CVE-2019-10132-locking-restrict-sockets-to-mode-0600.patch -&gt;
  f111e094-locking-restrict-sockets-to-mode-0600.patch
  CVE-2019-10132-logging-restrict-sockets-to-mode-0600.patch -&gt;
  e37bd65f-logging-restrict-sockets-to-mode-0600.patch</changelog>
  <changelog author="James Fehlig &lt;jfehlig@suse.com&gt;" date="1560513600">- api: disallow virConnect*HypervisorCPU,
  virConnectGetDomainCapabilities, virDomainManagedSaveDefineXML,
  and virDomainSaveImageGetXMLDesc on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10168-api-disallow-virConnect-HypervisorCPU.patch
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168
  bsc#1138301, bsc#1138302, bsc#1138303, bsc#1138305</changelog>
</package>
<package pkgid="7adab3654e4aee7efb506bb788c7e58667109cbe0404fc6109fafa2f57b674ad" name="wireshark-ui-qt" arch="i586">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="143e04cc68aea68b7ca2ca596d79d9b395e1e94ed4f05d24c09283b9bb1a1eb7" name="wireshark-ui-qt" arch="x86_64">
  <version epoch="0" ver="2.4.15" rel="lp151.2.3.1"/>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- Wireshark 2.4.10 (bsc#1111647):
  * CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)
  * CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html</changelog>
  <changelog author="astieger@suse.com" date="1543492800">- Wireshark 2.4.11 (bsc#1117740):
  * CVE-2018-19625: The Wireshark dissection engine could crash (wnpa-sec-2018-51)
  * CVE-2018-19626: The DCOM dissector could crash (wnpa-sec-2018-52)
  * CVE-2018-19623: The LBMPDM dissector could crash (wnpa-sec-2018-53)
  * CVE-2018-19622: The MMSE dissector could go into an infinite loop (wnpa-sec-2018-54)
  * CVE-2018-19627: The IxVeriWave file parser could crash (wnpa-sec-2018-55)
  * CVE-2018-19624: The PVFS dissector could crash (wnpa-sec-2018-56)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.11.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1547208000">- Wireshark 2.4.12:
  * CVE-2019-5717: The P_MUL dissector could crash (bsc#1121232)
  * CVE-2019-5718: The RTSE dissector and other dissectors could crash (bsc#1121233)
  * CVE-2019-5719: The ISAKMP dissector could crash (bsc#1121234)
  * CVE-2019-5721: The ENIP dissector could crash (bsc#1121235)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.12.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1551960000">- Wireshark 2.4.13:
  * CVE-2019-9214: RPCAP dissector could crash (bsc#1127367)
  * CVE-2019-9209: ASN.1 BER and related dissectors could crash (bsc#1127369)
  * CVE-2019-9208: TCAP dissector could crash (bsc#1127370)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1554811200">- Wireshark 2.4.14 (bsc#1131945):
  * CVE-2019-10895: NetScaler file parser crash.
  * CVE-2019-10899: SRVLOC dissector crash.
  * CVE-2019-10894: GSS-API dissector crash.
  * CVE-2019-10896: DOF dissector crash.
  * CVE-2019-10901: LDSS dissector crash.
  * CVE-2019-10903: DCERPC SPOOLSS dissector crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.14.html</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1558612800">- Wireshark 2.4.15 (bsc#1136021):
  * Wireshark dissection engine crash.
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.15.html</changelog>
</package>
<package pkgid="60c81ee39a98062c01413fb4778523ae5df32e042c0c51509e55a3ca83647250" name="xfdesktop" arch="src">
  <version epoch="0" ver="4.12.4" rel="lp151.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1335700800">- update to version 4.10.0
  - use the correct default value for the 'show thumbnails'
    checkbox
  - remove deprecated glib/gio functions
  - translation updates
- added dependency on exo-tools since it uses exo-desktop-item-edit</changelog>
  <changelog author="gber@opensuse.org" date="1335873600">- rename %{_datadir}/wallpapers/xfce/default.jpg to
  %{_datadir}/wallpapers/xfce/default.wallpaper, the default
  wallpaper formats may differ and xfdesktop doesn't care about
  the filetype extension</changelog>
  <changelog author="gber@opensuse.org" date="1336564800">- add versioned dependencies</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1340798400">- fix use-after-free in desktop icon tooltip code (bnc#768985)</changelog>
  <changelog author="gber@opensuse.org" date="1356004800">- added xfdesktop-fix-backdrop-timer.patch in order to fix the
  backdrop timer not being rescheduled (bnc#793723, bxo#8962)</changelog>
  <changelog author="gber@opensuse.org" date="1359460800">- fix the default path for background images in the settings dialog
  (bnc#800970)</changelog>
  <changelog author="gber@opensuse.org" date="1362657600">- update to version 4.10.1
  - add a tabs width of padding for tooltip text
  - fix theming of removable devices' icons
  - SVG images are no longer pixilated when scaled up
  - improve menu icon loading
  - fix background cycling
  - fix a crash when minimized window icons are resized
  - fix use-after-free in xfdesktop_regular_file_icon_peek_tooltip
  - translation updates
- dropped obsolete xfdesktop-fix-backdrop-timer.patch and
  xfdesktop-4.10.0-fix-use-after-free.patch</changelog>
  <changelog author="gber@opensuse.org" date="1362916800">- update to 4.10.2
  - fix hang when no backdrop image is selected
  - fix tiling for some images.</changelog>
  <changelog author="pgajdos@suse.cz" date="1363176000">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- update to version 4.11.6
  - miscellaneous bug fixes:
  - g_file_trash_async is too new (bxo#10786)
  - don't chain up style_set (bxo#10788)
  - fix for moving icons into folders on the desktop (bxo#10785)
  - fix issues with file move events (bxo#10796)
  - use GTK_STOCK_EXECUTE for Execute menu entry (bxo#10800)
  - change default image style to zoomed
  - fix for monitors not getting updated
  - hook up the signal handlers in xfdesktop-settings
  - miscellaneous bug fixes:
  - disconnect the directory signal handler when changing folders
  - correct an additional default icon size setting
  - fix for images not appearing in settings app (bxo#10685)
  - reset the icon_view style on style change (bxo#10605)
  - filter out changed events for special icons (bxo#10755)
  - use GIO directly for delete/trash operations (bxo#10778)
  - G_CONST_RETURN has been deprecated
  - versioned help:
  - point to the docs.xfce.org page for xfdesktop 4.11
    (bxo#10736)
  - build errors with some compiler flags:
  - dbus-glib is now required. Since xfconf requires it and
    xfconf is already required for xfdesktop, this shouldn't
    change dependancies much for xfdesktop. This bug was reported
    and fixed by Samuli Suominen (bxo#10745)
  - another build failure when disabling the menu and requiring
    exo was also resolved
  - icon changes in the settings app:
  - symbolic icons have issues with some gtk2 themes where they
    don't get colored properly. Additionally some themes don't
    have network-fs or gnome-dev-network so it has been changed
    gtk-network
  - right click edits launchers:
  - when performing a right click, or shift + left click, on an
    item in the applications sub-menu of the desktop menu it will
    now pop up the dialog to edit the launcher. Same as
    xfce4-appfinder
  - better migration from previous versions:
  - Xfdesktop now does a better job of migrating any user
    settings from 4.10 and before to the new xfconf properties
  - fix an settings issue when plug names aren't available
  - clean up some user strings:
  - some tooltips end with a period, some do not. This has been
    unified
  - "You are using more than one display, move this dialog to the
    display you want to edit the settings for." This takes a lot
    of space and brings along a bit of redundancy. Changed to
    "Move this dialog to the display you want to edit the
    settings for."
  - "Other items" on the third tab, below removable devices:
    "devices" replaces "items"
  - remember the window size of the settings dialog
  - fix segfault on session start
  - miscellaneous bug fixes:
  - iconview theme/gtkrc color/style issues resolved
  - issues with folder cover art not loading have been fixed
  - make xfdesktop-settings pluggable again (bxo#10714)
  - update the wallpapers after user sets folder in the settings
    app
  - minimize grid resizes, it now won't recalculate icon
    positions if the grid size didn't actually change
  - memory leaks fixed
  - warnings that happened during runtime have been fixed
  - fix a crash when removing displays
  - show add/remove workspace option is on by default
  - multi-monitor fixes:
  - release pixmap on screen changes
  - always redraw backdrop on display change
    both patches were added so that transitions from one monitor
    to another cause the backdrop to properly display
  - update default icon size, spacing, and text proportion
  - scale up small image previews in xfdesktop-settings (bxo#10690)
  - fix strict aliasing issue
  - check for thumbnails in the new location
  - fix issues with icon resizing
  - refresh desktop on style changes
  - fix potential bugs found with static code analysis tools
  - fix keyboard cursor movement in the icon view
  - fix some runtime warnings
  - ensure a quit signal causes xfdesktop to shutdown
  - fix icon labels in RTL languages (bxo#10604)
  - use get_folder_actions for clicks on the desktop itself
  - only use thunarx_menu_provider_get_file_actions (bxo#10492)
  - xfdesktop-settings:
  - add xfconf property to toggle the display of the add/remove
    workspace menu items in the middle click menu (bxo#4278,
    bxo#7337)
  - add an info bar to xfdesktop-settings so it is clearer on how
    to customize additional workspaces and monitors (bxo#10460)
  - keyboard navigation has been improved in xfdesktop-settings
  - port Xfdesktop to the GApplication API:
  - Xfdesktop now uses the GApplication API to handle process
    uniqueness, message passing, and life cycle management
  - improve how Xfdesktop transitions from the login manager to
    the initial wallpaper display; all bugs were reported and
    resolved by Alistair Buxton:
  - don't set the root pixmap until it's been drawn
  - don't show the window until the background is ready
  - don't set ESETROOT
  - scale down over-sized icons in menus so they have a uniform
    appearance (bxo#10545, bxo#10461)
  - move max-template-files xfconf property
  - remove old GLIB/GTK macro checks
  - update man page
  - wait for the window manager to prevent issues where the
    wallpaper and icons won't show up on additional screens
    during startup (bxo#7769)
  - fix icon renames causing duplicate icons
  - fix icons for .desktop files with absolute paths
  - don't show hidden or backup files on the desktop (bxo#9001)
  - fix a couple warning messages that happen when xfdesktop is
    shutdown while it's still starting up
  - improve how backdrops are chosen
  - wrong g_return_if_fail macro used
  - fix icon moves and deletions
  - don't cache the pixbufs in single workspace mode
  - clear all pixels from drag highlight box (bxo#10450)
  - speed up template sub-menu loading code (bxo#7834)
  - always move files from the trash (bxo#3983)
  - fix template sub-menu loading code (bxo#10138)
  - fix menu popups via the command line
  - use the Path key of desktop files if a path is not set
    (bxo#8741)
  - correctly display settings defaults
  - fix some memory leaks
  - include the chronological option in the combobox
  - allow the font size to go to 0
  - tooltip options in xfdesktop-settings
  - add a chronological backdrop cycle option
  - additonal backdrop cycle options
  - more removable device icon types (bxo#4056)
  - add icons in an idle callback
  - right click issues persist (bxo#9323)
  - migrate backdrop settings from previous versions (bxo#10380)
  - set warnings as fatal
  - update manpage (bxo#7576)
  - allow renaming of multiple icons
  - no need to remove the thumbnail if we're removing the icon
  - fix for renames removing icons
  - use GdkPixbufLoader for backdrops
  - change how icon positions are saved (bxo#9192)
  - avoid calling g_object_ref on NULL
  - fix for trash always showing empty on system startup (bxo#9006)
  - fix warnings and obsolete macros
  - fix a critical error message on exit
  - fix compiling with --disable-desktop-icons
  - custom folder icons (bxo#8326)
  - hold the cursor grab when presenting the menu (bxo#9323)
  - use async functions when working with the dbus filemanager
    (bxo#9105)
  - lower update delay of icon size spinbutton (bxo#9882)
  - unselect the desktop icon after activating it. (bxo#8640)
  - icon stays in place when renamed (bxo#1678)
  - better icon pixbuf caching
  - make inactive workspace headers insensitive in color
  - clean up middle-click menu appearance
  - fill in the icon area better
  - use GIcons and add support for emblems on icons
  - align icon labels and allow them to be multi-line (bxo#8646)
  - fix a crash when changing icon types
  - fix for CTRL + drag selections (bxo#10275)
  - more consistent icon placement (bxo#8814)
  - remove old migration code
  - fix HTTP URL performance issue / wrong action proposed
  - decide on move/copy action before items have been dropped
  - clip overlapping backdrops (bxo#9052)
  - fix memory leaks
  - apply wallpaper to all workspaces option
  - port fix for bxo#9892 from the xfce-4.10 branch
  - thumbnail service support to xfdesktop-settings (bxo#6536)
  - improve the eject/unmount notifications (bxo#9845)
  - Xfdesktop supports per-workspace wallpapers (bxo#369)
  - add a tabs width of padding for tooltip text (bxo#9162)
  - add a signal handler for removable devices to update the icon
    When the theme is changed (bxo#8977)
  - add an unmount option and notifications when a device is
    removed (bxo#7610)
  - made changes so that DISABLE_DEPRECATED and GSEAL flags can be
    enabled
  - autotools updates
  - translation updates
- drop obsolete xfdesktop-automake-1.13.patch</changelog>
  <changelog author="gber@opensuse.org" date="1407758400">- update to version 4.11.7
  - add an option to show hidden files
  - add a --next option to force wallpaper changes
  - add runtime debug support
  - add a move to trash menu option
  - change behaviour to behavior
  - Matias De lellis: Fix display desktop file that include
  extension in icon name
  - Matias De lellis: Fix missing thumbnail on xfdesktop when
  thumbler fails to create it
  - Mauro Giubileo: Fix icon position saving on resolution change
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1410782400">- update to version 4.11.8
  - fix xfdesktop --reload in spanning mode
  - settings: Fix background color loading
  - add an --enable-debug option added to xfdesktop-settings
  - fix icon loading for .desktop files
  - don't show infobar when there's only 1 workspace
  - remove the drag highlight code
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1416225600">- add xfdesktop-fix-default-application-lookup.patch in order to
  fix the default application lookup with gio &gt;= 2.41 (bxo#11306)</changelog>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 4.12.0
  - new background for 4.12!
  - add a space between icons to fill the entire screen
  - add optional blurring on shadow on text of icons
  - editing menu items with right click optional
    (bxo#11031)
  - clarify right click apps menu presence (bxo#10301)
  - default application not respected with glib &gt;= 2.41
    (bxo#11306)
  - include dir needed for building "out of tree"
  - fix crash in xfdesktop's metadata monitor
  - add 1px to widen the text shadow and improve contrast
  - fix calculation of shadows that are offset in RTL
    text (bxo#5239)
  - adapt thunar's context menu structure (bxo#11542)
  - additional context menu changes
  - consider shadow offsets and blur extents when
    calculating the text box
  - sort pending icons on resize (bxo#11266)
  - allow thunarx menu entries for multiple file selection
  - show 'No templates installed' when no templates
    are found
  - hide file action menu entries when volume + other
    icons are selected
  - don't use cairo_surface_create_similar_image
    (bxo#11566)
  - consider shadow extents/offsets when updating icon
    extents
  - translation updates
- remove obsolete xfdesktop-fix-default-application-lookup.patch
- rebased xfdesktop-default-background-image.patch</changelog>
  <changelog author="gber@opensuse.org" date="1427025600">- update to version 4.12.1
  - remove unused variable 'tmp_text'
  - monitor the wallpaper file for changes (bxo#11620)
  - reinitialize background when reloading desktop (bxo#11620)
  - update rc file after completing delete process (bxo#11692)
  - add a xfconf settings to center the text on xfdesktop icons;
    this fixes some issues with RTL languages.
  - do not overwrite rc file while restoring icons (bxo#11266)
  - fix crash when moving 2+ icons to the bottom right corner
  - fix icon placement when using "Arrange Desktop Icons"
    (bxo#11639)
  - center icons vertically in the grid (bxo#11086)
  - set initial value of font size spin button
  - show sub directories in template menu again
  - prevent accidental double clicks in single click mode
    (bxo#10720)
  - disable rename menu entry for special icons
  - add icon emblems in clockwise order
  - handle icons with preset emblems (bxo#7417)
  - enable drag&amp;drop popup menu for local actions
  - use mini icon and allow dimming of non-scaled icons
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 4.12.2
  - optimized sorting wallpapers (bxo#11817)
  - don't sort the image list when randomly cycling (bxo#11817)
  - don't load an image list unless we're cycling (bxo#11817)
  - allow dragging desktop launchers to the panel (bxo#2794)
  - load emblem-unreadable if necessary
  - bail out when a negative value was calculated for row/col.
    (bxo#11782)
  - hide empty comment line in icon tooltip
  - fix build error (bxo#11778)
  - ignore shadow blur radius when calculating icon text box
  - prefer "_NETSCAPE_URL" over "text/uri-list" (bxo#9632)
  - drop explicit LibSM check (bxo#11744)
  - preserve order when moving multiple icons (bxo#11195)
  - drop warning when D-Bus timeout error occurs (bxo#11283)
  - add default wallpaper folder to file chooser (bxo#11715)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1479988800">- update to version 4.12.3
  - rotate wallpaper images if they contain rotation information
  - Settings: Fix loading of wallpaper previews
  - fix setting of wallpaper if monitor name contains whitespace
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 4.12.4
  - Work around a regression in Gtk2 allowing directories to be
    selected in the settings dialog bxo#12832
  - Don't try to divide by 0 bxo#12115
  - Add DBUS_CFLAGS and DBUS_LIBS so that it compiles with newer
    xfconf.
- packaging: package NEWS instead of ChangeLog file, significantly
  reducing package size</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529236800">- update thunarx dependency
- add 0001-Use-the-new-Thunarx-3-API.patch for thunarx-3 usage
- use %license intead of %doc for COPYING file
- remove empty %post/%postun</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added xfdesktop-wallpaper-scaling.patch. Fixes boo#1134125
- Use %autosetup macro for simpler maintanance</changelog>
</package>
<package pkgid="1a9bfaad26d8fbbd62b11aca100fe04b6a4de36816675b0c3816c4c9f6fc5ed9" name="xfdesktop" arch="x86_64">
  <version epoch="0" ver="4.12.4" rel="lp151.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1407758400">- update to version 4.11.7
  - add an option to show hidden files
  - add a --next option to force wallpaper changes
  - add runtime debug support
  - add a move to trash menu option
  - change behaviour to behavior
  - Matias De lellis: Fix display desktop file that include
  extension in icon name
  - Matias De lellis: Fix missing thumbnail on xfdesktop when
  thumbler fails to create it
  - Mauro Giubileo: Fix icon position saving on resolution change
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1410782400">- update to version 4.11.8
  - fix xfdesktop --reload in spanning mode
  - settings: Fix background color loading
  - add an --enable-debug option added to xfdesktop-settings
  - fix icon loading for .desktop files
  - don't show infobar when there's only 1 workspace
  - remove the drag highlight code
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1416225600">- add xfdesktop-fix-default-application-lookup.patch in order to
  fix the default application lookup with gio &gt;= 2.41 (bxo#11306)</changelog>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 4.12.0
  - new background for 4.12!
  - add a space between icons to fill the entire screen
  - add optional blurring on shadow on text of icons
  - editing menu items with right click optional
    (bxo#11031)
  - clarify right click apps menu presence (bxo#10301)
  - default application not respected with glib &gt;= 2.41
    (bxo#11306)
  - include dir needed for building "out of tree"
  - fix crash in xfdesktop's metadata monitor
  - add 1px to widen the text shadow and improve contrast
  - fix calculation of shadows that are offset in RTL
    text (bxo#5239)
  - adapt thunar's context menu structure (bxo#11542)
  - additional context menu changes
  - consider shadow offsets and blur extents when
    calculating the text box
  - sort pending icons on resize (bxo#11266)
  - allow thunarx menu entries for multiple file selection
  - show 'No templates installed' when no templates
    are found
  - hide file action menu entries when volume + other
    icons are selected
  - don't use cairo_surface_create_similar_image
    (bxo#11566)
  - consider shadow extents/offsets when updating icon
    extents
  - translation updates
- remove obsolete xfdesktop-fix-default-application-lookup.patch
- rebased xfdesktop-default-background-image.patch</changelog>
  <changelog author="gber@opensuse.org" date="1427025600">- update to version 4.12.1
  - remove unused variable 'tmp_text'
  - monitor the wallpaper file for changes (bxo#11620)
  - reinitialize background when reloading desktop (bxo#11620)
  - update rc file after completing delete process (bxo#11692)
  - add a xfconf settings to center the text on xfdesktop icons;
    this fixes some issues with RTL languages.
  - do not overwrite rc file while restoring icons (bxo#11266)
  - fix crash when moving 2+ icons to the bottom right corner
  - fix icon placement when using "Arrange Desktop Icons"
    (bxo#11639)
  - center icons vertically in the grid (bxo#11086)
  - set initial value of font size spin button
  - show sub directories in template menu again
  - prevent accidental double clicks in single click mode
    (bxo#10720)
  - disable rename menu entry for special icons
  - add icon emblems in clockwise order
  - handle icons with preset emblems (bxo#7417)
  - enable drag&amp;drop popup menu for local actions
  - use mini icon and allow dimming of non-scaled icons
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 4.12.2
  - optimized sorting wallpapers (bxo#11817)
  - don't sort the image list when randomly cycling (bxo#11817)
  - don't load an image list unless we're cycling (bxo#11817)
  - allow dragging desktop launchers to the panel (bxo#2794)
  - load emblem-unreadable if necessary
  - bail out when a negative value was calculated for row/col.
    (bxo#11782)
  - hide empty comment line in icon tooltip
  - fix build error (bxo#11778)
  - ignore shadow blur radius when calculating icon text box
  - prefer "_NETSCAPE_URL" over "text/uri-list" (bxo#9632)
  - drop explicit LibSM check (bxo#11744)
  - preserve order when moving multiple icons (bxo#11195)
  - drop warning when D-Bus timeout error occurs (bxo#11283)
  - add default wallpaper folder to file chooser (bxo#11715)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1479988800">- update to version 4.12.3
  - rotate wallpaper images if they contain rotation information
  - Settings: Fix loading of wallpaper previews
  - fix setting of wallpaper if monitor name contains whitespace
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 4.12.4
  - Work around a regression in Gtk2 allowing directories to be
    selected in the settings dialog bxo#12832
  - Don't try to divide by 0 bxo#12115
  - Add DBUS_CFLAGS and DBUS_LIBS so that it compiles with newer
    xfconf.
- packaging: package NEWS instead of ChangeLog file, significantly
  reducing package size</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529236800">- update thunarx dependency
- add 0001-Use-the-new-Thunarx-3-API.patch for thunarx-3 usage
- use %license intead of %doc for COPYING file
- remove empty %post/%postun</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added xfdesktop-wallpaper-scaling.patch. Fixes boo#1134125
- Use %autosetup macro for simpler maintanance</changelog>
</package>
<package pkgid="e981fdcc7c4dab9e8e3a38e2990d227d406ff435718dbba95513d844e42cd05e" name="xfdesktop-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="lp151.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1407758400">- update to version 4.11.7
  - add an option to show hidden files
  - add a --next option to force wallpaper changes
  - add runtime debug support
  - add a move to trash menu option
  - change behaviour to behavior
  - Matias De lellis: Fix display desktop file that include
  extension in icon name
  - Matias De lellis: Fix missing thumbnail on xfdesktop when
  thumbler fails to create it
  - Mauro Giubileo: Fix icon position saving on resolution change
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1410782400">- update to version 4.11.8
  - fix xfdesktop --reload in spanning mode
  - settings: Fix background color loading
  - add an --enable-debug option added to xfdesktop-settings
  - fix icon loading for .desktop files
  - don't show infobar when there's only 1 workspace
  - remove the drag highlight code
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1416225600">- add xfdesktop-fix-default-application-lookup.patch in order to
  fix the default application lookup with gio &gt;= 2.41 (bxo#11306)</changelog>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 4.12.0
  - new background for 4.12!
  - add a space between icons to fill the entire screen
  - add optional blurring on shadow on text of icons
  - editing menu items with right click optional
    (bxo#11031)
  - clarify right click apps menu presence (bxo#10301)
  - default application not respected with glib &gt;= 2.41
    (bxo#11306)
  - include dir needed for building "out of tree"
  - fix crash in xfdesktop's metadata monitor
  - add 1px to widen the text shadow and improve contrast
  - fix calculation of shadows that are offset in RTL
    text (bxo#5239)
  - adapt thunar's context menu structure (bxo#11542)
  - additional context menu changes
  - consider shadow offsets and blur extents when
    calculating the text box
  - sort pending icons on resize (bxo#11266)
  - allow thunarx menu entries for multiple file selection
  - show 'No templates installed' when no templates
    are found
  - hide file action menu entries when volume + other
    icons are selected
  - don't use cairo_surface_create_similar_image
    (bxo#11566)
  - consider shadow extents/offsets when updating icon
    extents
  - translation updates
- remove obsolete xfdesktop-fix-default-application-lookup.patch
- rebased xfdesktop-default-background-image.patch</changelog>
  <changelog author="gber@opensuse.org" date="1427025600">- update to version 4.12.1
  - remove unused variable 'tmp_text'
  - monitor the wallpaper file for changes (bxo#11620)
  - reinitialize background when reloading desktop (bxo#11620)
  - update rc file after completing delete process (bxo#11692)
  - add a xfconf settings to center the text on xfdesktop icons;
    this fixes some issues with RTL languages.
  - do not overwrite rc file while restoring icons (bxo#11266)
  - fix crash when moving 2+ icons to the bottom right corner
  - fix icon placement when using "Arrange Desktop Icons"
    (bxo#11639)
  - center icons vertically in the grid (bxo#11086)
  - set initial value of font size spin button
  - show sub directories in template menu again
  - prevent accidental double clicks in single click mode
    (bxo#10720)
  - disable rename menu entry for special icons
  - add icon emblems in clockwise order
  - handle icons with preset emblems (bxo#7417)
  - enable drag&amp;drop popup menu for local actions
  - use mini icon and allow dimming of non-scaled icons
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 4.12.2
  - optimized sorting wallpapers (bxo#11817)
  - don't sort the image list when randomly cycling (bxo#11817)
  - don't load an image list unless we're cycling (bxo#11817)
  - allow dragging desktop launchers to the panel (bxo#2794)
  - load emblem-unreadable if necessary
  - bail out when a negative value was calculated for row/col.
    (bxo#11782)
  - hide empty comment line in icon tooltip
  - fix build error (bxo#11778)
  - ignore shadow blur radius when calculating icon text box
  - prefer "_NETSCAPE_URL" over "text/uri-list" (bxo#9632)
  - drop explicit LibSM check (bxo#11744)
  - preserve order when moving multiple icons (bxo#11195)
  - drop warning when D-Bus timeout error occurs (bxo#11283)
  - add default wallpaper folder to file chooser (bxo#11715)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1479988800">- update to version 4.12.3
  - rotate wallpaper images if they contain rotation information
  - Settings: Fix loading of wallpaper previews
  - fix setting of wallpaper if monitor name contains whitespace
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 4.12.4
  - Work around a regression in Gtk2 allowing directories to be
    selected in the settings dialog bxo#12832
  - Don't try to divide by 0 bxo#12115
  - Add DBUS_CFLAGS and DBUS_LIBS so that it compiles with newer
    xfconf.
- packaging: package NEWS instead of ChangeLog file, significantly
  reducing package size</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529236800">- update thunarx dependency
- add 0001-Use-the-new-Thunarx-3-API.patch for thunarx-3 usage
- use %license intead of %doc for COPYING file
- remove empty %post/%postun</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added xfdesktop-wallpaper-scaling.patch. Fixes boo#1134125
- Use %autosetup macro for simpler maintanance</changelog>
</package>
<package pkgid="b603d8dbfbd38688f88dc1623ac6c574d46579ed7dac0c0529ac3cf2f4173d2c" name="xfdesktop-lang" arch="noarch">
  <version epoch="0" ver="4.12.4" rel="lp151.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1407758400">- update to version 4.11.7
  - add an option to show hidden files
  - add a --next option to force wallpaper changes
  - add runtime debug support
  - add a move to trash menu option
  - change behaviour to behavior
  - Matias De lellis: Fix display desktop file that include
  extension in icon name
  - Matias De lellis: Fix missing thumbnail on xfdesktop when
  thumbler fails to create it
  - Mauro Giubileo: Fix icon position saving on resolution change
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1410782400">- update to version 4.11.8
  - fix xfdesktop --reload in spanning mode
  - settings: Fix background color loading
  - add an --enable-debug option added to xfdesktop-settings
  - fix icon loading for .desktop files
  - don't show infobar when there's only 1 workspace
  - remove the drag highlight code
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1416225600">- add xfdesktop-fix-default-application-lookup.patch in order to
  fix the default application lookup with gio &gt;= 2.41 (bxo#11306)</changelog>
  <changelog author="gber@opensuse.org" date="1425124800">- update to version 4.12.0
  - new background for 4.12!
  - add a space between icons to fill the entire screen
  - add optional blurring on shadow on text of icons
  - editing menu items with right click optional
    (bxo#11031)
  - clarify right click apps menu presence (bxo#10301)
  - default application not respected with glib &gt;= 2.41
    (bxo#11306)
  - include dir needed for building "out of tree"
  - fix crash in xfdesktop's metadata monitor
  - add 1px to widen the text shadow and improve contrast
  - fix calculation of shadows that are offset in RTL
    text (bxo#5239)
  - adapt thunar's context menu structure (bxo#11542)
  - additional context menu changes
  - consider shadow offsets and blur extents when
    calculating the text box
  - sort pending icons on resize (bxo#11266)
  - allow thunarx menu entries for multiple file selection
  - show 'No templates installed' when no templates
    are found
  - hide file action menu entries when volume + other
    icons are selected
  - don't use cairo_surface_create_similar_image
    (bxo#11566)
  - consider shadow extents/offsets when updating icon
    extents
  - translation updates
- remove obsolete xfdesktop-fix-default-application-lookup.patch
- rebased xfdesktop-default-background-image.patch</changelog>
  <changelog author="gber@opensuse.org" date="1427025600">- update to version 4.12.1
  - remove unused variable 'tmp_text'
  - monitor the wallpaper file for changes (bxo#11620)
  - reinitialize background when reloading desktop (bxo#11620)
  - update rc file after completing delete process (bxo#11692)
  - add a xfconf settings to center the text on xfdesktop icons;
    this fixes some issues with RTL languages.
  - do not overwrite rc file while restoring icons (bxo#11266)
  - fix crash when moving 2+ icons to the bottom right corner
  - fix icon placement when using "Arrange Desktop Icons"
    (bxo#11639)
  - center icons vertically in the grid (bxo#11086)
  - set initial value of font size spin button
  - show sub directories in template menu again
  - prevent accidental double clicks in single click mode
    (bxo#10720)
  - disable rename menu entry for special icons
  - add icon emblems in clockwise order
  - handle icons with preset emblems (bxo#7417)
  - enable drag&amp;drop popup menu for local actions
  - use mini icon and allow dimming of non-scaled icons
  - translation updates</changelog>
  <changelog author="gber@opensuse.org" date="1431864000">- update to version 4.12.2
  - optimized sorting wallpapers (bxo#11817)
  - don't sort the image list when randomly cycling (bxo#11817)
  - don't load an image list unless we're cycling (bxo#11817)
  - allow dragging desktop launchers to the panel (bxo#2794)
  - load emblem-unreadable if necessary
  - bail out when a negative value was calculated for row/col.
    (bxo#11782)
  - hide empty comment line in icon tooltip
  - fix build error (bxo#11778)
  - ignore shadow blur radius when calculating icon text box
  - prefer "_NETSCAPE_URL" over "text/uri-list" (bxo#9632)
  - drop explicit LibSM check (bxo#11744)
  - preserve order when moving multiple icons (bxo#11195)
  - drop warning when D-Bus timeout error occurs (bxo#11283)
  - add default wallpaper folder to file chooser (bxo#11715)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1479988800">- update to version 4.12.3
  - rotate wallpaper images if they contain rotation information
  - Settings: Fix loading of wallpaper previews
  - fix setting of wallpaper if monitor name contains whitespace
  - translation updates</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500465600">- update to version 4.12.4
  - Work around a regression in Gtk2 allowing directories to be
    selected in the settings dialog bxo#12832
  - Don't try to divide by 0 bxo#12115
  - Add DBUS_CFLAGS and DBUS_LIBS so that it compiles with newer
    xfconf.
- packaging: package NEWS instead of ChangeLog file, significantly
  reducing package size</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1529236800">- update thunarx dependency
- add 0001-Use-the-new-Thunarx-3-API.patch for thunarx-3 usage
- use %license intead of %doc for COPYING file
- remove empty %post/%postun</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1558094400">- Added xfdesktop-wallpaper-scaling.patch. Fixes boo#1134125
- Use %autosetup macro for simpler maintanance</changelog>
</package>
<package pkgid="b8ea3e08d2662307080bde7cc4bd6bda31b07e2d1154ba91fb9b1fca22ddbd9a" name="xfsprogs" arch="i586">
  <version epoch="0" ver="4.15.0" rel="lp151.7.3.1"/>
  <changelog author="jack@suse.cz" date="1448539200">- Update to 4.3.0
  * xfs_fsr: improved temp file attr fork handling
  * libxfs: output verifier names in warnings
  * xfs_repair: enable verifier corruption warnings on very verbose
    output settings
  * xfs_fsr: abstract mntinfo/mntent differences
  * xfs_io: reflink and dedupe operation support
  * libxcmd: factoring of runtime reporting
  * man page fixes
  * xfs_db: blockget/blocktrash support for v5 filesystems
  * xfs_repair: many directory/attr cleanups and fixes
  * Log zeroing rework for v5 filesystems to prevent log sequence
    numbers from going backwards
- xfsprogs-ppc64.diff: Removed since we use asm/types.h for definitions now</changelog>
  <changelog author="mpluskal@suse.com" date="1451390400">- Trigger regeneration of initrd n recent releases (bsc#960273)
- Remove conditions for unsupported releases
- Make building more verbose</changelog>
  <changelog author="mlin@suse.com" date="1459166400">- Update to 4.5.0
  * xfs_io: prevent divide-by-zero on random IO
  * xfs_db: dquot command documentation fixes
  * xfs_quota: better command line parsing and documentation
  * libxfs: update to match kernel 4.5-rc1 code base
  * xfs_io: add DAX inode flag support
  * repair: scalability improvements on large corrupt filesystems
  * repair: directory rebuild fixes
  * mdrestore: progress accounting now works
  * metadump: fix btree block unused region zeroing
  * quota: timer command fixes
  * mkfs: man page cleanups
  * xfs_io: reflink, dedupe and other fixes
  * quota: Q_XGETNEXTQUOTA support
  * build cleanups for alternate C librarys
  * db: check fixes for sparse inodes
  * various: Fixes for Coverity reports
  * xfs_io: Document zero and help commands
  * mkfs: DIO can use logical sector size limits
  * repair: don't reset log cycle numbers when zeroing
  * db: add ability to format log to a specific cycle</changelog>
  <changelog author="jeffm@suse.com" date="1494936000">- Advise user of fs recovery options when we fail to mount (fate#320443)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1494936001">- Update to 4.9.0
  * xfs_quota: handle wrapped id from GETNEXTQUOTA
  * xfs_repair: don't indicate dirtiness if FSGEOMETRY fails
  * xfs_repair: junk leaf attribute if count == 0
  * xfs_repair: fix some potential null pointer deferences
  * xfs_repair: fix bogus rmapbt record owner check
  * xfs.h: require transparent LFS for all users
  * xfs_io: Fix initial -m option
  * xfs_io: add command line option -i to start an idle thread
  * xfsprogs: Update FSF address in COPYING file
  * mkfs.xfs: format reflink enabled filesystems
  * xfs_repair: use thread pools to sort rmap data
  * xfs_repair: check for mergeable refcount records
  * xfs_repair: use range query when while checking rmaps
  * xfs_repair: check the CoW extent size hint
  * xfs_repair: complain about copy-on-write leftovers
  * xfs_repair: rebuild the refcount btree
  * xfs_repair: check the refcount btree against our observed reference counts when -n
  * xfs_repair: fix inode reflink flags
  * xfs_repair: record reflink inode state
  * xfs_repair: process reverse-mapping data into refcount data
  * xfs_repair: handle multiple owners of data blocks
  * xfs_repair: check the existing refcount btree
  * xfs_repair: fix get_agino_buf to avoid corrupting inodes
  * xfs_logprint: support bmap redo items
  * xfs_logprint: support refcount redo items
  * xfs_logprint: support cowextsize reporting in log contents
  * xfs_io: try to unshare copy-on-write blocks via fallocate
  * xfs_io: provide long-format help for falloc
  * xfs_io: support injecting the 'per-AG reservation critically low' error
  * xfs_io: add refcount+bmap error injection types
  * xfs_io: get and set the CoW extent size hint
  * libxfs: add autoconf mechanism to override system header fsxattr
  * xfs_io: bmap should support querying CoW fork, shared blocks
  * xfs_growfs: report the presence of the reflink feature
  * xfs_db: print one array element per line
  * xfs_db: deal with the CoW extent size hint
  * xfs_db: metadump should copy the refcount btree too
  * xfs_db: add support for checking the refcount btree
  * xfs_db: dump refcount btree data
  * libxfs: add fsxattr flags and fields for cowextsize
  * libxfs: free the CoW fork from an inode
  * libxfs: plumb in bmap deferred op log items
  * libxfs: plumb in refcount deferred op log items
  * libxfs: add xfs_refcount.h to the standard include list
  * libxfs: initialize the in-core mount context for refcount btrees
  * xfs_buflock: handling parsing errors more gracefully
  * xfs_logprint: fix up the RUI printing code to reflect new format
  * xfs: defer should abort intent items if the trans roll fails
  * xfs: add xfs_trim_extent
  * libxfs: clean up _calc_dquots_per_chunk
  * xfs: rework refcount cow recovery error handling
  * xfs: implement swapext for rmap filesystems
  * xfs: recognize the reflink feature bit
  * xfs: simulate per-AG reservations being critically low
  * xfs: don't mix reflink and DAX mode for now
  * xfs: check for invalid inode reflink flags
  * xfs: convert unwritten status of reverse mappings for shared files
  * xfs: use interval query for rmap alloc operations on shared files
  * xfs: add shared rmap map/unmap/convert log item types
  * xfs: increase log reservations for reflink
  * xfs: try other AGs to allocate a BMBT block
  * xfs: preallocate blocks for worst-case btree expansion
  * xfs: create a separate cow extent size hint for the allocator
  * xfs: teach get_bmapx about shared extents and the CoW fork
  * xfs: store in-progress CoW allocations in the refcount btree
  * xfs: support removing extents from CoW fork
  * xfs: support allocating delayed extents in CoW fork
  * xfs: support bmapping delalloc extents in the CoW fork
  * xfs: introduce the CoW fork
  * xfs: don't allow reflinked dir/dev/fifo/socket/pipe files
  * xfs: add reflink feature flag to geometry
  * xfs: return work remaining at the end of a bunmapi operation
  * xfs: implement deferred bmbt map/unmap operations
  * xfs: pass bmapi flags through to bmap_del_extent
  * xfs: map an inode's offset to an exact physical block
  * xfs: log bmap intent items
  * xfs: create bmbt update intent log items
  * xfs: introduce reflink utility functions
  * xfs: reserve AG space for the refcount btree root
  * xfs: adjust refcount when unmapping file blocks
  * xfs: connect refcount adjust functions to upper layers
  * xfs: adjust refcount of an extent of blocks in refcount btree
  * xfs: log refcount intent items
  * xfs: create refcount update intent log items
  * xfs: add refcount btree operations
  * xfs: account for the refcount btree in the alloc/free log reservation
  * xfs: define the on-disk refcount btree format
  * xfs: refcount btree add more reserved blocks
  * xfs: introduce refcount btree definitions
  * xfs: remote attribute blocks aren't really userdata
  * xfs: set up per-AG free space reservations
  * xfs: defer should allow -&gt;finish_item to request a new transaction
  * xfs: count the blocks in a btree
  * xfs: create a standard btree size calculator code
  * xfs: convert RUI log formats to use variable length arrays
  * xfs: track log done items directly in the deferred pending work item
  * xfs: fix superblock inprogress check
- Update to 4.8.0
  * Add support for reflinks
  * xfs_io: fix inode command with "-n" for bogus inode
  * xfs_io: fix inode command help and argsmax
  * xfs_repair: add freesp btree block overflow to the free space
  * xfs_repair: fix bogosity when rmapping new AGFL blocks
  * libxcmd: fix counting of xfs entries in fs_table_insert
  * xfs_copy: Fix meta UUID handling on multiple copies
  * xfs_repair: fix segfault from uninitialized tp in mv_orphanage
  * xfs_io: allow chattr &amp; chproj on foreign filesystems
  * xfs_quota: fix free command for foreign fs
  * xfs_quota: un-flag non-foreign-capable commands
  * xfs_quota: Enable 3 more foreign commands
  * xfs_quota: add case for foreign fs, disabled regardless of foreign_allowed
  * xfs_quota: print and path output formatting: maintain reverse compatibility
  * libxcmd: populate fs table with xfs entries first, foreign entries last
  * xfs_repair: exit with status 2 if log dirtiness is unknown
  * xfs_db: pass the inode cluster offset when copying inodes
  * xfs_repair: don't crash on ENOSPC rebuilding a btree
  * libxfs/linux.c: Replace use of ustat by stat
  * db: write via array indexing doesn't work
  * xfs_db: properly set dquot_buf when operating on dquot
  * xfs_quota: fix missing break after foreign_allowed option
  * xfs_db: add crc manipulation commands
  * xfs_quota: certain commands must always be available
  * xfs_quota: add capabilities for use on non-XFS filesystems
  * xfs_quota: wire up XFS_GETQSTATV
  * xfs_metadump: don't warn about unobfuscated log with -o
  * xfs_repair: fix naming problems in repair/rmap.c
  * misc: fix libxfs api violations
  * misc: fix Coverity errors
  * libxcmd: fix mount option parsing to find rt/log devices
  * xfs: simple btree query range should look right if LE lookup fails
  * xfs: fix some key handling problems in _btree_simple_query_range
  * xfs: don't perform lookups on zero-height btrees
  * mkfs.xfs: create filesystems with reverse-mappings
  * mkfs: set agsize prior to calculating minimum log size
  * xfs_repair: check for impossible rmap record field combinations
  * xfs_repair: look for mergeable rmaps
  * xfs_repair: merge data &amp; attr fork reverse mappings
  * xfs_repair: add per-AG btree blocks to rmap data and add to rmapbt
  * xfs_repair: rebuild reverse-mapping btree
  * xfs_repair: check existing rmapbt entries against observed rmaps
  * xfs_repair: add fixed-location per-AG rmaps
  * xfs_repair: add inode bmbt block rmaps
  * xfs_repair: record and merge raw rmap data
  * xfs_repair: collect reverse-mapping data for refcount/rmap tree rebuilding
  * xfs_repair: create a slab API for allocating arrays in large chunks
  * xfs_repair: fix fino_bno calculation when rmapbt is enabled
  * xfs_repair: use rmap btree data to check block types
  * xfs_logprint: support rmap redo items
  * xfs_io: add rmap-finish error injection type
  * xfs_growfs: report rmapbt presence
  * xfs_db: introduce the 'fsmap' command to find what owns a set of fsblocks
  * xfs_db: copy the rmap btree
  * xfs_db: spot check rmapbt
  * xfs_db: display rmap btree contents
  * libxfs: add deferred ops item handlers for userspace
  * libxfs: fix various oddities in the kernel import
  * xfs: store rmapbt block count in the AGF
  * xfs_io: add free-extent error injection type
  * xfs_logprint: fix formatting issues with the EFI printing code
  * xfs_repair: preserve in-core meta_uuid while zeroing unused sb portions
  * xfs_io: bmap should print 'delalloc', not '-2'
  * xfs_buflock: add a tool that can be used to find buffer deadlocks
  * libxfs: fix xfs_isset pointer calculation
  * xfs: increase XFS_BTREE_MAXLEVELS to fit the rmapbt
  * xfs: change xfs_bmap_{finish,cancel,init,free} -&gt; xfs_defer_*
  * xfs: rework xfs_bmap_free callers to use xfs_defer_ops
  * xfs: enable the xfs_defer mechanism to process extents to free
  * xfs: introduce interval queries on btrees
  * xfs: support btrees with overlapping intervals for keys
  * xfs: add function pointers for get/update keys to the btree
  * xfs: during btree split, save new block key &amp; ptr for future insertion
  * xfs: set *stat=1 after iroot realloc
  * xfs: fix locking of the rt bitmap/summary inodes
  * xfs: fix attr shortform structure alignment on cris
- Update to 4.7.0
  * xfs_quota: fall back silently if XFS_GETNEXTQUOTA fails
  * xfs_io: implement 'copy_range' command
  * xfs_repair: low memory shouldn't indicate corruption on exit
  * xfs_repair: don't call xfs_sb_quota_from_disk twice
  * xfs_repair: resolve Coverity OVERFLOW_BEFORE_WIDEN
  * libxfs: fix double free in libxfs_alloc_file_space
  * libxfs: fix use after from in xfs_trans_roll
  * xfs: always set rvalp in xfs_dir2_node_trim_free
  * xfs: borrow indirect blocks from freed extent when available
  * xfs: update freeblocks counter after extent deletion
  * xfs: fix computation of inode btree maxlevels
  * xfs_check: process sparse inode chunks correctly
  * xfs_db: Revert "xfs_db: make check work for sparse inodes"
  * xfs_repair: set rsumino version to 2
  * mkfs: better error with incorrect b/s value suffix usage
  * mkfs: fix -l su minval
  * xfs.h: define XFS_IOC_FREEZE even if FIFREEZE is defined
  * xfs_quota: only round up timer reporting &gt; 1 day
  * xfs_quota: check report_mount return value
  * xfs_repair: new secondary superblock search method
  * libxcmd: generalize topology functions
  * xfs_db: defang frag command
  * db: limit AGFL bno array printing
  * xfs_db: allow recalculating CRCs on invalid metadata
  * xfs_db: fix unaligned accesses
  * metadump: limit permissible sector sizes
  * mkfs: conflicting values with disabled crc should fail
  * mkfs: add optional 'reason' for illegal_option
  * mkfs: unit conversions are case insensitive
  * mkfs: don't treat files as though they are block devices
  * mkfs: add string options to generic parsing
  * mkfs: encode conflicts into parsing table
  * mkfs: merge getnum
  * mkfs: table based parsing for converted parameters
  * mkfs: add respecification detection to generic parsing
  * mkfs: use getnum_checked for all ranged parameters
  * mkfs: getbool is redundant
  * mkfs: structify input parameter passing
  * mkfs: validate logarithmic parameters sanely
  * mkfs: validate all input values
  * mkfs: Sanitise the superblock feature macros
  * mkfs: sanitise ftype parameter values.
  * xfsprogs: use common code for multi-disk detection
  * xfs_repair: fix agf limit error messages
  * xfs_quota: print quota id number if the name can't be found
  * xfs_quota: fully support users and groups beginning with digits
  * xfs_io: allow mmap command to reserve some free space
  * xfs_io: modify argument errors of mremap command
  * Merge branch 'progs-misc-fixes-for-4.6' into for-master
  * Merge branch 'libxfs-4.6-sync' into for-master
  * xfs_io: implement 'inode' command
  * mkfs: fix crash when initializing rbmip
  * libxfs: fix up mismerge in libxfs_iflush_int
  * xfs: RT bitmap and summary buffers need verifiers
  * xfs: RT bitmap and summary buffers are not typed
  * xfs: handle errors from -&gt;free_blocks in xfs_btree_kill_iroot
  * xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk</changelog>
  <changelog author="jeffm@suse.com" date="1496404800">- fsr: fix uninitialized fs usage after timeout (bsc#1002699).
  * Added fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Fix crash in xfs_repair when threads fail to start (bsc#1019938).
  * Added xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Added xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Added xfs_repair-fix-thread-creation-failure-recovery.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jeffm@suse.com" date="1510920000">- Update to 4.13.1
  * mkfs: don't overflow the subopts array
- Update to 4.13.0
  * xfs_repair: handle missing extent states
  * mkfs: pass a custom cowextsize into the created filesystem
  * xfs_db: version command misses RMAPBT feature string
  * xfs_repair: don't use do_warn for normal log message
  * libxfs: remove getcwd/chdir dance from initialization
  * xfs_repair: take the ag_lock before recording rmap for a bmbt record
  * mkfs.xfs: Don't stagger AG for a single disk
  * xfs: fix inobt inode allocation search optimization
  * xfs_io: clarify the fsmap documentation
  * fiemap: Fix semantics of max_extents (-n arguments)
  * xfs_repair: fix thread creation failure recovery
  * xfs_repair: add prefetch trace calls to debug thread creation failures
  * xfs_repair: clear pthread_t when pthread_create fails
  * xfs_io: add seek consistency checks
  * fsr: fix uninitialized fs usage after timeout
  * xfs_db: bit fuzzing should read the right bit when flipping
  * xfs_db: make write/fuzz -c and -d work on non-crc filesystems
  * xfs_db: free field list when failing out of fuzz
  * xfs_db: reset metadump output flag
  * xfs_db: btdump should avoid eval for push and pop of cursor
  * xfs_db: use TYP_F_CRC_FUNC for inodes &amp; dquots
  * xfs_db: introduce fuzz command
  * xfs_db: write values into dir/attr blocks and recalculate CRCs
  * xfs_db: print attribute remote value blocks
  * xfs_db: dump dir/attr btrees
  * xfs_db: fix metadump redirection (again)
  * xfs_repair: fix symlink target length checks by changing MAXPATHLEN to XFS_SYMLINK_MAXLEN
  * xfs_metadump: properly handle obfuscation of all remote attribute blocks
  * xfs_io: allow lsattr &amp; lsproj on foreign filesystems
  * libxfs: init -&gt;b_maps on contig buffers for uncached compatibility
  * xfs_db: associate proper type with free inode btree root
  * xfs_io: Print filesystem statfs flags in 'statfs' command
  * xfs: fix multi-AG deadlock in xfs_bunmapi
  * xfs: check that dir block entries don't off the end of the buffer
  * xfs: check _alloc_read_agf buffer pointer before using
  * xfs: set firstfsb to NULLFSBLOCK before feeding it to _bmapi_write
  * xfs: check _btree_check_block value
  * xfs: don't crash on unexpected holes in dir/attr btrees
  * xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub
  * xfs: try to avoid blowing out the transaction reservation when bunmaping a shared extent
- Update to 4.12.0
  * libxfs: propagate transaction block reservations
  * xfs_db: properly set inode type
  * xfs_db: redirect printfs when metadumping to stdout
  * mkfs.xfs: allow specification of 0 data stripe width &amp; unit
  * mkfs: set inode alignment and cluster size for minimum log size estimation
  * mkfs: set agblklog when we're verifying minimum log size
  * libxfs: fix fsmap.h inclusion
  * xfs_db: identify attr dabtree field types correctly
  * xfs_spaceman: fix potential overflowing expression in trim_f()
  * xfs_spaceman: close open file for error case in openfile()
  * xfs_spaceman: fix potential memory leak by malloc in scan_ag
  * xfs_db: improve argument naming in set_cur and set_iocur_type
  * xfs_db: update buffer size when new type is set
  * xfs_spaceman: add group summary mode
  * xfs_spaceman: add a man page
  * xfs_spaceman: Free space mapping command
  * xfs_spaceman: add new speculative prealloc control
  * xfs_spaceman: add FITRIM support
  * xfs_spaceman: space management tool
  * xfs_repair: replace rmap_compare with libxfs version
  * xfs_io: support the new getfsmap ioctl
  * xfs: introduce the XFS_IOC_GETFSMAP ioctl
  * libxfs: use crc32c slice-by-8 variant by default
  * libxcmd: add cvt{int, long} to convert strings to int and long
  * metadump: warn about corruption if log is dirty
  * xfs_metadump: tag metadump image with informational flags
  * xfs_repair: handle reading superblock from image on larger sector size filesystem
  * xfs_db: add alignment filter to freesp command
  * xfs_growfs: ensure target path is an active xfs mountpoint
  * libxfs: fix xfs_trans_alloc_empty namespace
  * xfs: fix unaligned access in xfs_btree_visit_blocks
  * xfs: avoid mount-time deadlock in CoW extent recovery
  * xfs: fix indlen accounting error on partial delalloc conversion
  * xfs: abstract PF_FSTRANS to PF_MEMALLOC_NOFS
  * xfs: reserve enough blocks to handle btree splits when remapping
  * xfs: simplify validation of the unwritten extent bit
  * xfs: introduce xfs_bmapi_remap
  * xfs: pass individual arguments to xfs_bmap_add_extent_hole_real
  * xfs: fix integer truncation in xfs_bmap_remap_alloc
  * xfs: simplify xfs_calc_dquots_per_chunk
  * xfs: implement the GETFSMAP ioctl
  * xfs: add a couple of queries to iterate free extents in the rtbitmap
  * xfs: create a function to query all records in a btree
  * xfs: provide a query_range function for freespace btrees
  * xfs: plumb in needed functions for range querying of the freespace btrees
  * xfs: fix up inode validation failure message
- Update to 4.11.0
  * xfs_io: add missed quotation marks in man page
  * xfs_io: add missed inode command into man page
  * xfs_io: fix statx call for changed UAPI
  * xfs_db: dump metadata btrees via 'btdump'
  * xfs_db: use iocursor type to guess btree geometry if bad magic
  * xfs_db: don't print arrays off the end of a buffer
  * mkfs.xfs: Assign proper defaults to rmapbt and reflink flags
  * xfs_io: Add statx support for PowerPC architecture
  * xfs_io: fix statx definition for non-x86 architecture
  * xfs_db: allow write -d to dqblks
  * xfs_db: allow write -d to inodes
  * xfs_io: hook up statx
  * xfsprogs: fix build dep on configure.ac
  * xfs_repair: pass btnum not magic to phase5 functions
  * xfs_io: Fix "falloc -p" to pass KEEP_SIZE
  * xfs_repair: warn about dirty log with -n option
  * xfs_repair: detect invalid zero-sized symlink inodes
  * xfs_io: support shutdown command on foreign fses
  * libxfs: fix xfs_extent_busy_flush macro definition
  * xfs: verify inline directory data forks
  * xfs: try any AG when allocating the first btree block when reflinking
  * xfs: use iomap new flag for newly allocated delalloc blocks
  * xfs: tune down agno asserts in the bmap code
  * xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
  * xfs: split indlen reservations fairly when under reserved
  * xfs: handle indlen shortage on delalloc extent merge
  * xfs: improve handling of busy extents in the low-level allocator
  * xfs: go straight to real allocations for direct I/O COW writes
  * xfs: allow unwritten extents in the CoW fork
  * xfs: verify free block header fields
  * xfs: check for obviously bad level values in the bmbt root
  * xfs: filter out obviously bad btree pointers
  * xfs: fail _dir_open when readahead fails
  * xfs: fix toctou race when locking an inode to access the data map
  * xfs: glean crc status from mp not flags in xfs_btree_init_block_int
- Update to 4.10.0
  * xfs_metadump: ignore attr leaf with 0 entries
  * libxfs: sync up FSGETXATTR names and definitions with the kernel
  * xfsprogs: Fix building xfsprogs on 32-bit platforms (again)
  * xfs: extsize hints are not unlikely in xfs_bmap_btalloc
  * xfs: use per-AG reservations for the finobt
  * xfs: only update mount/resv fields on success in __xfs_ag_resv_init
  * xfs: verify dirblocklog correctly
  * xfs: fix COW writeback race
  * xfs: fix xfs_mode_to_ftype() prototype
  * xfs_db: Interpret inode's di_format field as unsigned
  * xfs_repair: trash dirattr btrees that cycle to the root
  * xfs_repair: strengthen geometry checks
  * xfs_db: fix the 'source' command when passed as a -c option
  * libxfs: sanitize agcount on load
  * xfs_io: add DAX and CoW extent-size flags to chattr manpage
  * xfs_io: fix missing syncfs command
  * xfs_logprint: handle log operation split of inode item correctly
  * xfs: sanity check inode di_mode
  * xfs: sanity check directory inode di_size
  * xfs_repair: update the manual content about xfs_repair exit status
  * xfs_repair.8: document dirty log conditions
  * xfs_io: implement 'utimes' command
  * libxcmd: add non-iterating user commands
  * xfs_io: make various commands one-shot only
  * libxcmd: don't check generic library commands
  * libxcmd: merge command() and iterate_command()
  * libxcmd: rename args_command to command_iterator
  * libxcmd: check CMD_FLAG_GLOBAL inside args_command()
  * xfs_io: fix some documentation problems
  * xfs_io: fix the minimum arguments to the reflink command
  * xfs_io: prefix dedupe command error messages consistently
  * xfs_io: Improvements to copy_range return code handling
  * xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
  * xfs_logprint: di_gen is unsigned
  * xfs_io: fix building with musl
  * xfs: don't rely on -&gt;total in xfs_alloc_space_available
  * xfs: adjust allocation length in xfs_alloc_space_available
  * xfs: fix bogus minleft manipulations
  * xfs: bump up reserved blocks in xfs_alloc_set_aside
  * xfs: use the actual AG length when reserving blocks
  * xfs: use GPF_NOFS when allocating btree cursors
  * xfs: ignore leaf attr ichdr.count in verifier during log replay
  * xfs: optimise CRC updates
  * xfs: make xfs btree stats less huge
  * xfs: don't allow di_size with high bit set
  * xfs: error out if trying to add attrs and anextents &gt; 0
  * xfs: don't crash if reading a directory results in an unexpected hole
  * xfs: complain if we don't get nextents bmap records
  * xfs: check for bogus values in btree block headers
  * xfs: forbid AG btrees with level == 0
  * xfs: several xattr functions can be void
  * xfs: handle cow fork in xfs_bmap_trace_exlist
  * xfs: pass state not whichfork to trace_xfs_extlist
  * xfs: Move AGI buffer type setting to xfs_read_agi
  * xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
  * fs: xfs: libxfs: constify xfs_nameops structures
  * repair: use new extent lookup helpers in bmap_next_offset
  * xfs: use new extent lookup helpers in __xfs_bunmapi
  * xfs: use new extent lookup helpers in xfs_bmapi_write
  * xfs: use new extent lookup helpers in xfs_bmapi_read
  * xfs: new inode extent list lookup helpers
  * xfs: check minimum block size for CRC filesystems
  * xfs: provide helper for counting extents from if_bytes
  * xfs: check return value of _trans_reserve_quota_nblks
  * xfs: set XFS_DA_OP_OKNOENT in xfs_attr_get
- Removed now-obsolete patches:
  * Removed xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Removed xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Removed xfs_repair-fix-thread-creation-failure-recovery.patch
  * Removed fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1510920001">- Fix building on SLE11
- Added xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Added xfs_io-stat-treat-statfs.f_flags-as-optional.patch</changelog>
  <changelog author="lurodriguez@suse.com" date="1513684800">- Deletes already merged xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Deletes already merged xfs_io-stat-treat-statfs.f_flags-as-optional.patch
- Refreshes patch xfsprogs-docdir.diff
- Update to v4.14.0:
  * xfs_io: stat: treat statfs.f_flags as optional
  * xfs_io: stat: fix typo in statfs-&gt;f_flags
  * xfsprogs: fix wrong variable types in pwrite/pread code
  * xfs_io: Allow partial writes
  * xfs_io: Add RWF_NOWAIT to pwritev2()
  * xfs_io: Add support for pwritev2()
  * xfs_io: Disable -V if pwritev is not available
  * xfs_repair: always release btree buffers when refcountbt checks fail
  * misc: fix ubsan warnings
  * misc: enable thread sanitizer if the builder wants it
  * misc: enable gcc/clang address sanitizer if the builder wants it
  * misc: enable ubsan if the builder wants it
  * xfs_repair: fix cowextsize field checking and repairing
  * xfs_repair: clear DAX flag from non-file inodes
  * xfs_repair: fix bag memory overwrite problems
  * xfs_io: add new error injection knobs to inject command
  * xfsprogs: explicitly cast troublesome types to match printf  format specifiers
  * db: increase metadump's default overly long extent discard  threshold
  * build: define _DEFAULT_SOURCE with _BSD_SOURCE for preadv
  * xfsprogs: add xfs_spaceman to .gitignore
  * xfs_io: report io error for pwrite -W and -w
  * xfs_metadump: zap stale data in DIR2_LEAF1 dirs
  * metadump: update manpage for dirty log/obfuscation issue
  * kill off u_int*_t types
  * xfs: trim writepage mapping to within eof
  * xfs: handle error if xfs_btree_get_bufs fails
  * xfs: Fix bool initialization/comparison
  * xfs: Don't log uninitialised fields in inode structures
  * xfs: revert "xfs: factor rmap btree size into the indlen calculations"
  * xfs: perag initialization should only touch m_ag_max_usable for AG 0
  * xfs: fix compiler warnings
  * xfs: simplify the rmap code in xfs_bmse_merge
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents
  * xfs: move some code around inside xfs_bmap_shift_extents
  * xfs: use xfs_iext_get_extent in xfs_bmap_first_unused
  * xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert
  * xfs: add a xfs_iext_update_extent helper
  * xfs: relog dirty buffers during swapext bmbt owner change
  * xfs: skip bmbt block ino validation during owner change
  * xfs: don't log dirty ranges for ordered buffers
  * xfs: remove the ip argument to xfs_defer_finish
  * xfs: rename xfs_defer_join to xfs_defer_ijoin
  * xfs: refactor xfs_trans_roll
  * xfs: stop searching for free slots in an inode chunk when there are none</changelog>
  <changelog author="lurodriguez@suse.com" date="1519819200">- adds make_xfs_scrub_interp_explicit.patch, rpm lint complains about
  using env python, when this is used the dependency checker for rpm
  will not be able to resolve dependencies correctly, so an explicit
  interpreter is needed.
- Update to v4.15.0 as it contains major code refactor on mkfs/xfs_mkfs.c
  which would help to eventually consider completing FATE#324503. Changes
  in this release:
  * Fix spelling mistake in mkfs lazy superblock diagnostic
  * Fix grammar and spelling in strings and man pages
  * Add xfs_scrub_fail systemd service file docs entry
  * Update .gitignore list for generated scrub cron file
  * Several updates to use more modern Debian packaging
  * xfsprogs: Release v4.15.0-rc1
  * xfs_scrub: refactor outcome display into a separate helper
  * xfs_scrub: always init phase information
  * xfs_scrub: reclassify some of the warning messages
  * xfs_scrub: reclassify runtime errors
  * xfs_scrub: classify lack of ioctl support as a runtime error
  * xfs_scrub: remove preen mode
  * xfs_mdrestore: Don't rewind source file stream
  * xfs_mdrestore: Add -i option to built-in help
  * xfs_io: fix copy_file_range symbol name collision
  * xfs_scrub: kill dead code
  * xfs_scrub: close dir_fd if we don't get a DIR pointer
  * mkfs: don't create realtime filesystems with reflink enabled
  * xfs_scrub: handle scrub-only kernels more helpfully
  * xfs_scrub: wire up repair ioctl
  * debian/control: remove nonexistent libreadline5-dev build dependency
  * xfs_scrub: integrate services with systemd
  * xfs_scrub: create a script to scrub all xfs filesystems
  * xfs_scrub: progress indicator
  * xfs_scrub: fstrim the free areas if there are no errors on the filesystem
  * xfs_scrub: check summary counters
  * xfs_scrub: optionally use SCSI READ VERIFY commands to scrub data blocks on disk
  * xfs_scrub: scrub file data blocks
  * xfs_scrub: create infrastructure to read verify data blocks
  * xfs_scrub: create a bitmap data structure
  * xfs_scrub: warn about normalized Unicode name collisions
  * xfs_scrub: warn about suspicious characters in directory/xattr names
  * xfs_scrub: check directory connectivity
  * xfs_scrub: scan inodes
  * xfs_scrub: thread-safe stats counter
  * xfs_scrub: scan filesystem and AG metadata
  * xfs_scrub: wrap the scrub ioctl
  * xfs_scrub: filesystem counter collection functions
  * xfs_scrub: add file space map iteration functions
  * xfs_scrub: add space map iteration functions
  * xfs_scrub: add inode iteration functions
  * xfs_scrub: find XFS filesystem geometry
  * xfs_scrub: create an abstraction for a block device
  * xfs_scrub: figure out how many threads we're going to need
  * xfs_scrub: dispatch the various phases of the scrub program
  * xfs_scrub: set up command line argument parsing
  * xfs_scrub: common error handling
  * xfs_scrub: create online filesystem scrub program
  * mkfs: more sunit/swidth sanity checking
  * mkfs: always explain why numeric inputs are invalid
  * mkfs: don't call values 'illegal', they're invalid
  * mkfs: don't crash on dswidth overflow
  * misc: ubsan fixes
  * xfs_db: interpret inode timestamps as signed integers
  * xfsprogs: update dead urls
  * xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT
  * xfs_logprint: fix v3 inode formatting
  * libxfs: use a memory zone for log items
  * libxfs: use a memory zone for transactions
  * libxfs: remove unused buf_fsprivate3
  * xfs: add a proper transaction pointer to struct xfs_buf
  * xfs: remove wrappers around b_fspriv
  * find-api-violations: fix a broken grep pattern
  * xfs_repair: fix libxfs namespace problems
  * xfs_db: fix crash when field list selector string has trailing slash
  * xfs_db: check should deal with cow staging extents correctly
  * libhandle: zap fdhash in fshandle_destroy
  * xfs_io: add a new 'log_writes' command
  * xfs_io: add MAP_SYNC support to mmap()
  * mkfs: do not allow both "dev" and "name" subopts for log or realtime
  * mkfs: pass switch case value directly into getnum/getstr
  * mkfs: un-document removed logarithm based CLI options
  * mkfs: remove logarithm based CLI options
  * mkfs: resolve sector size CLI conflicts
  * mkfs: convert subopt name, val pairs to enums and declared arrays
  * mkfs: support arbitrary conflict specification
  * mkfs: protofile only needs to be set up once
  * mkfs: simplify minimum log size calculation
  * mkfs: use opts parameter during option parsing
  * mkfs: remove use-once default macros
  * mkfs: document sb_feat_args members
  * mkfs: invert project id width boolean name
  * mkfs: remove unused m_uuid in sb_feat_args
  * mkfs: Don't emit default config message yet
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: only skip rmap owner checks for unknown-owner rmap removal
  * xfs: always honor OWN_UNKNOWN rmap removal requests
  * xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order
  * xfs: move xfs_iext_insert tracepoint to report useful information
  * xfs: account for null transactions in bunmapi
  * xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute
  * xfs: add the ability to join a held buffer to a defer_ops
  * xfs: refactor buffer logging into buffer dirtying helper
  * xfs: remove "no-allocation" reservations for file creations
  * xfs: fix leaks on corruption errors in xfs_bmap.c
  * libxfs: libxfs_nproc should never return negative numbers
  * mkfs: tidy up definitions
  * mkfs: move error functions
  * mkfs: cleanup redundant temporary code
  * mkfs: factor log size calculations
  * mkfs: factor initial mount setup
  * mkfs: rework imaxpct calculation
  * mkfs: factor AG alignment
  * mkfs: factor AG geometry calculations
  * mkfs: factor rt device validation
  * mkfs: factor log device validation
  * mkfs: factor data device validation
  * mkfs: factor device opening
  * mkfs: rework stripe calculations
  * mkfs: factor rtdev extent size validation
  * mkfs: fix hidden parameter in DTOBT()
  * mkfs: factor out device size calculations
  * mkfs: factor inode size validation
  * mkfs: factor directory blocksize validation
  * mkfs: factor superblock feature validation
  * mkfs: factor log sector size validation
  * mkfs: factor blocksize validation
  * mkfs: factor sectorsize validation
  * mkfs: rename top level CLI parameters
  * mkfs: introduce default configuration structure
  * mkfs: factor secondary superblock updates
  * mkfs: factor writing AG headers
  * mkfs: factor out device preparation
  * mkfs: factor in memory superblock setup
  * mkfs: factor printing of mkfs config
  * mkfs: Introduce mkfs configuration structure
  * mkfs: factor sector subopts parser
  * mkfs: factor rt subopts parser
  * mkfs: factor naming subopts parser
  * mkfs: factor meta subopts parser
  * mkfs: factor log subopts parser
  * mkfs: factor inode subopts parser
  * mkfs: factor data subopts parser
  * mkfs: factor block subopts parser
  * mkfs: add generic subopt parsing table
  * mkfs: introduce a structure to hold CLI options
  * mkfs: make subopt table const
  * mkfs: disallow specifying the sector size of internal log
  * xfs_db: add missing padding fields
  * xfs_db: print structure padding fields consistently
  * xfs_repair: remove old workqueue stuff in favor of libfrog code
  * libhandle: add missing destructor
  * libfrog: add missing function fs_table_destroy
  * libfrog: move paths.c out of libxcmd
  * libfrog: move conversion factors out of libxcmd
  * libfrog: move topology code out of libxcmd
  * libfrog: create a threaded workqueue
  * libfrog: promote avl64 code from xfs_repair
  * libfrog: move list_sort out of libxfs
  * libfrog: add bit manipulation functions
  * libfrog: move libxfs_log2_roundup to libfrog
  * libfrog: move all the userspace support stuff into a new library
  * man: describe the metadata scrubbing ioctl
  * xfs_io: provide an interface to the scrub ioctls
  * xfs_io: add buf_lru_ref tag to inject table
  * xfs_io: pull xfs errortag definitions from libxfs
  * xfs_io: implement ranged fiemap query
  * xfs_io: fix gcc-7 related printf warnings
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: abstract out dev_t conversions
  * xfs: fix memory leak in xfs_iext_free_last_leaf
  * xfs: fix type usage
  * xfs: remove u_int* type usage
  * xfs: handle zero entries case in xfs_iext_rebalance_leaf
  * xfs: add comments documenting the rebalance algorithm
  * xfs: trivial indentation fixup for xfs_iext_remove_node
  * xfs: remove a superflous assignment in xfs_iext_remove_node
  * xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node
  * xfs: fix number of records handling in xfs_iext_split_leaf
  * xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static
  * xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h
  * xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent
  * xfs: remove the nr_extents argument to xfs_iext_remove
  * xfs: remove the nr_extents argument to xfs_iext_insert
  * xfs: use a b+tree for the in-core extent list
  * xfs: allow unaligned extent records in xfs_bmbt_disk_set_all
  * xfs: remove support for inlining data/extents into the inode fork
  * xfs: simplify xfs_reflink_convert_cow
  * xfs: introduce the xfs_iext_cursor abstraction
  * xfs: iterate over extents in xfs_bmap_extents_to_btree
  * xfs: iterate over extents in xfs_iextents_copy
  * xfs: pass an on-disk extent to xfs_bmbt_validate_extent
  * xfs: treat idx as a cursor in xfs_bmap_collapse_extents
  * xfs: treat idx as a cursor in xfs_bmap_del_extent_*
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real
  * xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real
  * xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real
  * xfs: convert remaining xfs_sb_version_... checks to bool
  * xfs: move error injection tags into their own file
  * xfs: remove inode log format typedef
  * xfs: remove the inode log format from the inode log item
  * xfs: remove redundant assignment to variable bit
  * xfs: compare btree block keys to parent block's keys during scrub
  * xfs: abort dir/attr btree operation if btree is obviously weird
  * xfs: add a new xfs_iext_lookup_extent_before helper
  * xfs: merge xfs_bmap_read_extents into xfs_iread_extents
  * xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent
  * xfs: don't rely on extent indices in xfs_bmap_insert_extents
  * xfs: don't rely on extent indices in xfs_bmap_collapse_extents
  * xfs: update got in xfs_bmap_shift_update_extent
  * xfs: remove xfs_bmse_shift_one
  * xfs: split xfs_bmap_shift_extents
  * xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS
  * xfs: remove if_rdev
  * xfs: remove the never fully implemented UUID fork format
  * xfs: remove XFS_BMAP_TRACE_EXLIST
  * xfs: move pre/post-bmap tracing into xfs_iext_update_extent
  * xfs: remove post-bmap tracing in xfs_bmap_local_to_extents
  * xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real
  * xfs: add a xfs_bmap_fork_to_state helper
  * xfs: scrub quota information
  * xfs: scrub realtime bitmap/summary
  * xfs: scrub directory parent pointers
  * xfs: scrub symbolic links
  * xfs: scrub extended attributes
  * xfs: scrub directory metadata
  * xfs: scrub inode block mappings
  * xfs: scrub inodes
  * xfs: scrub refcount btrees
  * xfs: scrub rmap btrees
  * xfs: scrub inode btrees
  * xfs: scrub free space btrees
  * xfs: scrub the AGI
  * xfs: scrub AGF and AGFL
  * xfs: scrub the secondary superblocks
  * xfs: scrub the shape of a metadata btree
  * xfs: probe the scrub ioctl
  * xfs: create an ioctl to scrub AG metadata
  * xfs: create inode pointer verifiers
  * xfs: refactor btree block header checking functions
  * xfs: refactor btree pointer checks
  * xfs: create block pointer check functions
  * xfs: remove xfs_bmbt_get_state
  * xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all
  * xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update
  * xfs: refactor xfs_bmap_add_extent_unwritten_real
  * xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_hole_real
  * xfs: refactor xfs_bmap_add_extent_hole_delay
  * xfs: refactor xfs_del_extent_real
  * xfs: use the state defines in xfs_bmap_del_extent_real
  * xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay}
  * xfs: move some more code into xfs_bmap_del_extent_real
  * xfs: use xfs_bmap_del_extent_delay for the data fork as well
  * xfs: rename bno to end in __xfs_bunmapi
  * xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi
  * xfs: use xfs_iext_get_extent instead of open coding it
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real</changelog>
  <changelog author="olaf@aepfle.de" date="1523966400">- xfsprogs-devel needs uuid/uuid.h, Require pkgconfig(uuid) (bsc#1089947)</changelog>
  <changelog author="jeffm@suse.com" date="1534852800">- mkfs: avoid divide-by-zero when hardware reports optimal i/o size as 0
  (bsc#1089777)
  - xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch</changelog>
  <changelog author="jeffm@suse.com" date="1534852801">- repair: shift inode back into place if corrupted by bad log
  replay (bsc#1105396).
  * Added 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch</changelog>
  <changelog author="jeffm@suse.com" date="1540209600">- Explictly disable systemd unit files for scrub (bsc#1105068).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1545220800">- xfs_repair: Fix root inode's parent when it's bogus for sf directory
  (bsc#1119063)
  * Add xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576000">- xfs_repair: Add missing braces to allow zeroing of corrupt log
  (bsc#1073421)
  * Add xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576001">- xfs_repair: allow '/' in attribute names (bsc#1122271)
  * Add xfsprogs-xfs_repair-allow-in-attribute-names.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1558353600">- xfs_info: enable offline (unmounted) filesystem geometry queries (bsc#1129859)
  * Add xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  * Add xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  * Add xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  * Add xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  * Add xfsprogs-xfs_db-add-a-superblock-info-command.patch
  * Add xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  * Add xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  * Add xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  * Add xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch</changelog>
</package>
<package pkgid="4598e7ca06e6a7bf68c6dcbf1dcf65cb9d0dd6d1989a66ab6d896b9dfcdba489" name="xfsprogs" arch="src">
  <version epoch="0" ver="4.15.0" rel="lp151.7.3.1"/>
  <changelog author="jack@suse.cz" date="1448539200">- Update to 4.3.0
  * xfs_fsr: improved temp file attr fork handling
  * libxfs: output verifier names in warnings
  * xfs_repair: enable verifier corruption warnings on very verbose
    output settings
  * xfs_fsr: abstract mntinfo/mntent differences
  * xfs_io: reflink and dedupe operation support
  * libxcmd: factoring of runtime reporting
  * man page fixes
  * xfs_db: blockget/blocktrash support for v5 filesystems
  * xfs_repair: many directory/attr cleanups and fixes
  * Log zeroing rework for v5 filesystems to prevent log sequence
    numbers from going backwards
- xfsprogs-ppc64.diff: Removed since we use asm/types.h for definitions now</changelog>
  <changelog author="mpluskal@suse.com" date="1451390400">- Trigger regeneration of initrd n recent releases (bsc#960273)
- Remove conditions for unsupported releases
- Make building more verbose</changelog>
  <changelog author="mlin@suse.com" date="1459166400">- Update to 4.5.0
  * xfs_io: prevent divide-by-zero on random IO
  * xfs_db: dquot command documentation fixes
  * xfs_quota: better command line parsing and documentation
  * libxfs: update to match kernel 4.5-rc1 code base
  * xfs_io: add DAX inode flag support
  * repair: scalability improvements on large corrupt filesystems
  * repair: directory rebuild fixes
  * mdrestore: progress accounting now works
  * metadump: fix btree block unused region zeroing
  * quota: timer command fixes
  * mkfs: man page cleanups
  * xfs_io: reflink, dedupe and other fixes
  * quota: Q_XGETNEXTQUOTA support
  * build cleanups for alternate C librarys
  * db: check fixes for sparse inodes
  * various: Fixes for Coverity reports
  * xfs_io: Document zero and help commands
  * mkfs: DIO can use logical sector size limits
  * repair: don't reset log cycle numbers when zeroing
  * db: add ability to format log to a specific cycle</changelog>
  <changelog author="jeffm@suse.com" date="1494936000">- Advise user of fs recovery options when we fail to mount (fate#320443)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1494936001">- Update to 4.9.0
  * xfs_quota: handle wrapped id from GETNEXTQUOTA
  * xfs_repair: don't indicate dirtiness if FSGEOMETRY fails
  * xfs_repair: junk leaf attribute if count == 0
  * xfs_repair: fix some potential null pointer deferences
  * xfs_repair: fix bogus rmapbt record owner check
  * xfs.h: require transparent LFS for all users
  * xfs_io: Fix initial -m option
  * xfs_io: add command line option -i to start an idle thread
  * xfsprogs: Update FSF address in COPYING file
  * mkfs.xfs: format reflink enabled filesystems
  * xfs_repair: use thread pools to sort rmap data
  * xfs_repair: check for mergeable refcount records
  * xfs_repair: use range query when while checking rmaps
  * xfs_repair: check the CoW extent size hint
  * xfs_repair: complain about copy-on-write leftovers
  * xfs_repair: rebuild the refcount btree
  * xfs_repair: check the refcount btree against our observed reference counts when -n
  * xfs_repair: fix inode reflink flags
  * xfs_repair: record reflink inode state
  * xfs_repair: process reverse-mapping data into refcount data
  * xfs_repair: handle multiple owners of data blocks
  * xfs_repair: check the existing refcount btree
  * xfs_repair: fix get_agino_buf to avoid corrupting inodes
  * xfs_logprint: support bmap redo items
  * xfs_logprint: support refcount redo items
  * xfs_logprint: support cowextsize reporting in log contents
  * xfs_io: try to unshare copy-on-write blocks via fallocate
  * xfs_io: provide long-format help for falloc
  * xfs_io: support injecting the 'per-AG reservation critically low' error
  * xfs_io: add refcount+bmap error injection types
  * xfs_io: get and set the CoW extent size hint
  * libxfs: add autoconf mechanism to override system header fsxattr
  * xfs_io: bmap should support querying CoW fork, shared blocks
  * xfs_growfs: report the presence of the reflink feature
  * xfs_db: print one array element per line
  * xfs_db: deal with the CoW extent size hint
  * xfs_db: metadump should copy the refcount btree too
  * xfs_db: add support for checking the refcount btree
  * xfs_db: dump refcount btree data
  * libxfs: add fsxattr flags and fields for cowextsize
  * libxfs: free the CoW fork from an inode
  * libxfs: plumb in bmap deferred op log items
  * libxfs: plumb in refcount deferred op log items
  * libxfs: add xfs_refcount.h to the standard include list
  * libxfs: initialize the in-core mount context for refcount btrees
  * xfs_buflock: handling parsing errors more gracefully
  * xfs_logprint: fix up the RUI printing code to reflect new format
  * xfs: defer should abort intent items if the trans roll fails
  * xfs: add xfs_trim_extent
  * libxfs: clean up _calc_dquots_per_chunk
  * xfs: rework refcount cow recovery error handling
  * xfs: implement swapext for rmap filesystems
  * xfs: recognize the reflink feature bit
  * xfs: simulate per-AG reservations being critically low
  * xfs: don't mix reflink and DAX mode for now
  * xfs: check for invalid inode reflink flags
  * xfs: convert unwritten status of reverse mappings for shared files
  * xfs: use interval query for rmap alloc operations on shared files
  * xfs: add shared rmap map/unmap/convert log item types
  * xfs: increase log reservations for reflink
  * xfs: try other AGs to allocate a BMBT block
  * xfs: preallocate blocks for worst-case btree expansion
  * xfs: create a separate cow extent size hint for the allocator
  * xfs: teach get_bmapx about shared extents and the CoW fork
  * xfs: store in-progress CoW allocations in the refcount btree
  * xfs: support removing extents from CoW fork
  * xfs: support allocating delayed extents in CoW fork
  * xfs: support bmapping delalloc extents in the CoW fork
  * xfs: introduce the CoW fork
  * xfs: don't allow reflinked dir/dev/fifo/socket/pipe files
  * xfs: add reflink feature flag to geometry
  * xfs: return work remaining at the end of a bunmapi operation
  * xfs: implement deferred bmbt map/unmap operations
  * xfs: pass bmapi flags through to bmap_del_extent
  * xfs: map an inode's offset to an exact physical block
  * xfs: log bmap intent items
  * xfs: create bmbt update intent log items
  * xfs: introduce reflink utility functions
  * xfs: reserve AG space for the refcount btree root
  * xfs: adjust refcount when unmapping file blocks
  * xfs: connect refcount adjust functions to upper layers
  * xfs: adjust refcount of an extent of blocks in refcount btree
  * xfs: log refcount intent items
  * xfs: create refcount update intent log items
  * xfs: add refcount btree operations
  * xfs: account for the refcount btree in the alloc/free log reservation
  * xfs: define the on-disk refcount btree format
  * xfs: refcount btree add more reserved blocks
  * xfs: introduce refcount btree definitions
  * xfs: remote attribute blocks aren't really userdata
  * xfs: set up per-AG free space reservations
  * xfs: defer should allow -&gt;finish_item to request a new transaction
  * xfs: count the blocks in a btree
  * xfs: create a standard btree size calculator code
  * xfs: convert RUI log formats to use variable length arrays
  * xfs: track log done items directly in the deferred pending work item
  * xfs: fix superblock inprogress check
- Update to 4.8.0
  * Add support for reflinks
  * xfs_io: fix inode command with "-n" for bogus inode
  * xfs_io: fix inode command help and argsmax
  * xfs_repair: add freesp btree block overflow to the free space
  * xfs_repair: fix bogosity when rmapping new AGFL blocks
  * libxcmd: fix counting of xfs entries in fs_table_insert
  * xfs_copy: Fix meta UUID handling on multiple copies
  * xfs_repair: fix segfault from uninitialized tp in mv_orphanage
  * xfs_io: allow chattr &amp; chproj on foreign filesystems
  * xfs_quota: fix free command for foreign fs
  * xfs_quota: un-flag non-foreign-capable commands
  * xfs_quota: Enable 3 more foreign commands
  * xfs_quota: add case for foreign fs, disabled regardless of foreign_allowed
  * xfs_quota: print and path output formatting: maintain reverse compatibility
  * libxcmd: populate fs table with xfs entries first, foreign entries last
  * xfs_repair: exit with status 2 if log dirtiness is unknown
  * xfs_db: pass the inode cluster offset when copying inodes
  * xfs_repair: don't crash on ENOSPC rebuilding a btree
  * libxfs/linux.c: Replace use of ustat by stat
  * db: write via array indexing doesn't work
  * xfs_db: properly set dquot_buf when operating on dquot
  * xfs_quota: fix missing break after foreign_allowed option
  * xfs_db: add crc manipulation commands
  * xfs_quota: certain commands must always be available
  * xfs_quota: add capabilities for use on non-XFS filesystems
  * xfs_quota: wire up XFS_GETQSTATV
  * xfs_metadump: don't warn about unobfuscated log with -o
  * xfs_repair: fix naming problems in repair/rmap.c
  * misc: fix libxfs api violations
  * misc: fix Coverity errors
  * libxcmd: fix mount option parsing to find rt/log devices
  * xfs: simple btree query range should look right if LE lookup fails
  * xfs: fix some key handling problems in _btree_simple_query_range
  * xfs: don't perform lookups on zero-height btrees
  * mkfs.xfs: create filesystems with reverse-mappings
  * mkfs: set agsize prior to calculating minimum log size
  * xfs_repair: check for impossible rmap record field combinations
  * xfs_repair: look for mergeable rmaps
  * xfs_repair: merge data &amp; attr fork reverse mappings
  * xfs_repair: add per-AG btree blocks to rmap data and add to rmapbt
  * xfs_repair: rebuild reverse-mapping btree
  * xfs_repair: check existing rmapbt entries against observed rmaps
  * xfs_repair: add fixed-location per-AG rmaps
  * xfs_repair: add inode bmbt block rmaps
  * xfs_repair: record and merge raw rmap data
  * xfs_repair: collect reverse-mapping data for refcount/rmap tree rebuilding
  * xfs_repair: create a slab API for allocating arrays in large chunks
  * xfs_repair: fix fino_bno calculation when rmapbt is enabled
  * xfs_repair: use rmap btree data to check block types
  * xfs_logprint: support rmap redo items
  * xfs_io: add rmap-finish error injection type
  * xfs_growfs: report rmapbt presence
  * xfs_db: introduce the 'fsmap' command to find what owns a set of fsblocks
  * xfs_db: copy the rmap btree
  * xfs_db: spot check rmapbt
  * xfs_db: display rmap btree contents
  * libxfs: add deferred ops item handlers for userspace
  * libxfs: fix various oddities in the kernel import
  * xfs: store rmapbt block count in the AGF
  * xfs_io: add free-extent error injection type
  * xfs_logprint: fix formatting issues with the EFI printing code
  * xfs_repair: preserve in-core meta_uuid while zeroing unused sb portions
  * xfs_io: bmap should print 'delalloc', not '-2'
  * xfs_buflock: add a tool that can be used to find buffer deadlocks
  * libxfs: fix xfs_isset pointer calculation
  * xfs: increase XFS_BTREE_MAXLEVELS to fit the rmapbt
  * xfs: change xfs_bmap_{finish,cancel,init,free} -&gt; xfs_defer_*
  * xfs: rework xfs_bmap_free callers to use xfs_defer_ops
  * xfs: enable the xfs_defer mechanism to process extents to free
  * xfs: introduce interval queries on btrees
  * xfs: support btrees with overlapping intervals for keys
  * xfs: add function pointers for get/update keys to the btree
  * xfs: during btree split, save new block key &amp; ptr for future insertion
  * xfs: set *stat=1 after iroot realloc
  * xfs: fix locking of the rt bitmap/summary inodes
  * xfs: fix attr shortform structure alignment on cris
- Update to 4.7.0
  * xfs_quota: fall back silently if XFS_GETNEXTQUOTA fails
  * xfs_io: implement 'copy_range' command
  * xfs_repair: low memory shouldn't indicate corruption on exit
  * xfs_repair: don't call xfs_sb_quota_from_disk twice
  * xfs_repair: resolve Coverity OVERFLOW_BEFORE_WIDEN
  * libxfs: fix double free in libxfs_alloc_file_space
  * libxfs: fix use after from in xfs_trans_roll
  * xfs: always set rvalp in xfs_dir2_node_trim_free
  * xfs: borrow indirect blocks from freed extent when available
  * xfs: update freeblocks counter after extent deletion
  * xfs: fix computation of inode btree maxlevels
  * xfs_check: process sparse inode chunks correctly
  * xfs_db: Revert "xfs_db: make check work for sparse inodes"
  * xfs_repair: set rsumino version to 2
  * mkfs: better error with incorrect b/s value suffix usage
  * mkfs: fix -l su minval
  * xfs.h: define XFS_IOC_FREEZE even if FIFREEZE is defined
  * xfs_quota: only round up timer reporting &gt; 1 day
  * xfs_quota: check report_mount return value
  * xfs_repair: new secondary superblock search method
  * libxcmd: generalize topology functions
  * xfs_db: defang frag command
  * db: limit AGFL bno array printing
  * xfs_db: allow recalculating CRCs on invalid metadata
  * xfs_db: fix unaligned accesses
  * metadump: limit permissible sector sizes
  * mkfs: conflicting values with disabled crc should fail
  * mkfs: add optional 'reason' for illegal_option
  * mkfs: unit conversions are case insensitive
  * mkfs: don't treat files as though they are block devices
  * mkfs: add string options to generic parsing
  * mkfs: encode conflicts into parsing table
  * mkfs: merge getnum
  * mkfs: table based parsing for converted parameters
  * mkfs: add respecification detection to generic parsing
  * mkfs: use getnum_checked for all ranged parameters
  * mkfs: getbool is redundant
  * mkfs: structify input parameter passing
  * mkfs: validate logarithmic parameters sanely
  * mkfs: validate all input values
  * mkfs: Sanitise the superblock feature macros
  * mkfs: sanitise ftype parameter values.
  * xfsprogs: use common code for multi-disk detection
  * xfs_repair: fix agf limit error messages
  * xfs_quota: print quota id number if the name can't be found
  * xfs_quota: fully support users and groups beginning with digits
  * xfs_io: allow mmap command to reserve some free space
  * xfs_io: modify argument errors of mremap command
  * Merge branch 'progs-misc-fixes-for-4.6' into for-master
  * Merge branch 'libxfs-4.6-sync' into for-master
  * xfs_io: implement 'inode' command
  * mkfs: fix crash when initializing rbmip
  * libxfs: fix up mismerge in libxfs_iflush_int
  * xfs: RT bitmap and summary buffers need verifiers
  * xfs: RT bitmap and summary buffers are not typed
  * xfs: handle errors from -&gt;free_blocks in xfs_btree_kill_iroot
  * xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk</changelog>
  <changelog author="jeffm@suse.com" date="1496404800">- fsr: fix uninitialized fs usage after timeout (bsc#1002699).
  * Added fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Fix crash in xfs_repair when threads fail to start (bsc#1019938).
  * Added xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Added xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Added xfs_repair-fix-thread-creation-failure-recovery.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jeffm@suse.com" date="1510920000">- Update to 4.13.1
  * mkfs: don't overflow the subopts array
- Update to 4.13.0
  * xfs_repair: handle missing extent states
  * mkfs: pass a custom cowextsize into the created filesystem
  * xfs_db: version command misses RMAPBT feature string
  * xfs_repair: don't use do_warn for normal log message
  * libxfs: remove getcwd/chdir dance from initialization
  * xfs_repair: take the ag_lock before recording rmap for a bmbt record
  * mkfs.xfs: Don't stagger AG for a single disk
  * xfs: fix inobt inode allocation search optimization
  * xfs_io: clarify the fsmap documentation
  * fiemap: Fix semantics of max_extents (-n arguments)
  * xfs_repair: fix thread creation failure recovery
  * xfs_repair: add prefetch trace calls to debug thread creation failures
  * xfs_repair: clear pthread_t when pthread_create fails
  * xfs_io: add seek consistency checks
  * fsr: fix uninitialized fs usage after timeout
  * xfs_db: bit fuzzing should read the right bit when flipping
  * xfs_db: make write/fuzz -c and -d work on non-crc filesystems
  * xfs_db: free field list when failing out of fuzz
  * xfs_db: reset metadump output flag
  * xfs_db: btdump should avoid eval for push and pop of cursor
  * xfs_db: use TYP_F_CRC_FUNC for inodes &amp; dquots
  * xfs_db: introduce fuzz command
  * xfs_db: write values into dir/attr blocks and recalculate CRCs
  * xfs_db: print attribute remote value blocks
  * xfs_db: dump dir/attr btrees
  * xfs_db: fix metadump redirection (again)
  * xfs_repair: fix symlink target length checks by changing MAXPATHLEN to XFS_SYMLINK_MAXLEN
  * xfs_metadump: properly handle obfuscation of all remote attribute blocks
  * xfs_io: allow lsattr &amp; lsproj on foreign filesystems
  * libxfs: init -&gt;b_maps on contig buffers for uncached compatibility
  * xfs_db: associate proper type with free inode btree root
  * xfs_io: Print filesystem statfs flags in 'statfs' command
  * xfs: fix multi-AG deadlock in xfs_bunmapi
  * xfs: check that dir block entries don't off the end of the buffer
  * xfs: check _alloc_read_agf buffer pointer before using
  * xfs: set firstfsb to NULLFSBLOCK before feeding it to _bmapi_write
  * xfs: check _btree_check_block value
  * xfs: don't crash on unexpected holes in dir/attr btrees
  * xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub
  * xfs: try to avoid blowing out the transaction reservation when bunmaping a shared extent
- Update to 4.12.0
  * libxfs: propagate transaction block reservations
  * xfs_db: properly set inode type
  * xfs_db: redirect printfs when metadumping to stdout
  * mkfs.xfs: allow specification of 0 data stripe width &amp; unit
  * mkfs: set inode alignment and cluster size for minimum log size estimation
  * mkfs: set agblklog when we're verifying minimum log size
  * libxfs: fix fsmap.h inclusion
  * xfs_db: identify attr dabtree field types correctly
  * xfs_spaceman: fix potential overflowing expression in trim_f()
  * xfs_spaceman: close open file for error case in openfile()
  * xfs_spaceman: fix potential memory leak by malloc in scan_ag
  * xfs_db: improve argument naming in set_cur and set_iocur_type
  * xfs_db: update buffer size when new type is set
  * xfs_spaceman: add group summary mode
  * xfs_spaceman: add a man page
  * xfs_spaceman: Free space mapping command
  * xfs_spaceman: add new speculative prealloc control
  * xfs_spaceman: add FITRIM support
  * xfs_spaceman: space management tool
  * xfs_repair: replace rmap_compare with libxfs version
  * xfs_io: support the new getfsmap ioctl
  * xfs: introduce the XFS_IOC_GETFSMAP ioctl
  * libxfs: use crc32c slice-by-8 variant by default
  * libxcmd: add cvt{int, long} to convert strings to int and long
  * metadump: warn about corruption if log is dirty
  * xfs_metadump: tag metadump image with informational flags
  * xfs_repair: handle reading superblock from image on larger sector size filesystem
  * xfs_db: add alignment filter to freesp command
  * xfs_growfs: ensure target path is an active xfs mountpoint
  * libxfs: fix xfs_trans_alloc_empty namespace
  * xfs: fix unaligned access in xfs_btree_visit_blocks
  * xfs: avoid mount-time deadlock in CoW extent recovery
  * xfs: fix indlen accounting error on partial delalloc conversion
  * xfs: abstract PF_FSTRANS to PF_MEMALLOC_NOFS
  * xfs: reserve enough blocks to handle btree splits when remapping
  * xfs: simplify validation of the unwritten extent bit
  * xfs: introduce xfs_bmapi_remap
  * xfs: pass individual arguments to xfs_bmap_add_extent_hole_real
  * xfs: fix integer truncation in xfs_bmap_remap_alloc
  * xfs: simplify xfs_calc_dquots_per_chunk
  * xfs: implement the GETFSMAP ioctl
  * xfs: add a couple of queries to iterate free extents in the rtbitmap
  * xfs: create a function to query all records in a btree
  * xfs: provide a query_range function for freespace btrees
  * xfs: plumb in needed functions for range querying of the freespace btrees
  * xfs: fix up inode validation failure message
- Update to 4.11.0
  * xfs_io: add missed quotation marks in man page
  * xfs_io: add missed inode command into man page
  * xfs_io: fix statx call for changed UAPI
  * xfs_db: dump metadata btrees via 'btdump'
  * xfs_db: use iocursor type to guess btree geometry if bad magic
  * xfs_db: don't print arrays off the end of a buffer
  * mkfs.xfs: Assign proper defaults to rmapbt and reflink flags
  * xfs_io: Add statx support for PowerPC architecture
  * xfs_io: fix statx definition for non-x86 architecture
  * xfs_db: allow write -d to dqblks
  * xfs_db: allow write -d to inodes
  * xfs_io: hook up statx
  * xfsprogs: fix build dep on configure.ac
  * xfs_repair: pass btnum not magic to phase5 functions
  * xfs_io: Fix "falloc -p" to pass KEEP_SIZE
  * xfs_repair: warn about dirty log with -n option
  * xfs_repair: detect invalid zero-sized symlink inodes
  * xfs_io: support shutdown command on foreign fses
  * libxfs: fix xfs_extent_busy_flush macro definition
  * xfs: verify inline directory data forks
  * xfs: try any AG when allocating the first btree block when reflinking
  * xfs: use iomap new flag for newly allocated delalloc blocks
  * xfs: tune down agno asserts in the bmap code
  * xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
  * xfs: split indlen reservations fairly when under reserved
  * xfs: handle indlen shortage on delalloc extent merge
  * xfs: improve handling of busy extents in the low-level allocator
  * xfs: go straight to real allocations for direct I/O COW writes
  * xfs: allow unwritten extents in the CoW fork
  * xfs: verify free block header fields
  * xfs: check for obviously bad level values in the bmbt root
  * xfs: filter out obviously bad btree pointers
  * xfs: fail _dir_open when readahead fails
  * xfs: fix toctou race when locking an inode to access the data map
  * xfs: glean crc status from mp not flags in xfs_btree_init_block_int
- Update to 4.10.0
  * xfs_metadump: ignore attr leaf with 0 entries
  * libxfs: sync up FSGETXATTR names and definitions with the kernel
  * xfsprogs: Fix building xfsprogs on 32-bit platforms (again)
  * xfs: extsize hints are not unlikely in xfs_bmap_btalloc
  * xfs: use per-AG reservations for the finobt
  * xfs: only update mount/resv fields on success in __xfs_ag_resv_init
  * xfs: verify dirblocklog correctly
  * xfs: fix COW writeback race
  * xfs: fix xfs_mode_to_ftype() prototype
  * xfs_db: Interpret inode's di_format field as unsigned
  * xfs_repair: trash dirattr btrees that cycle to the root
  * xfs_repair: strengthen geometry checks
  * xfs_db: fix the 'source' command when passed as a -c option
  * libxfs: sanitize agcount on load
  * xfs_io: add DAX and CoW extent-size flags to chattr manpage
  * xfs_io: fix missing syncfs command
  * xfs_logprint: handle log operation split of inode item correctly
  * xfs: sanity check inode di_mode
  * xfs: sanity check directory inode di_size
  * xfs_repair: update the manual content about xfs_repair exit status
  * xfs_repair.8: document dirty log conditions
  * xfs_io: implement 'utimes' command
  * libxcmd: add non-iterating user commands
  * xfs_io: make various commands one-shot only
  * libxcmd: don't check generic library commands
  * libxcmd: merge command() and iterate_command()
  * libxcmd: rename args_command to command_iterator
  * libxcmd: check CMD_FLAG_GLOBAL inside args_command()
  * xfs_io: fix some documentation problems
  * xfs_io: fix the minimum arguments to the reflink command
  * xfs_io: prefix dedupe command error messages consistently
  * xfs_io: Improvements to copy_range return code handling
  * xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
  * xfs_logprint: di_gen is unsigned
  * xfs_io: fix building with musl
  * xfs: don't rely on -&gt;total in xfs_alloc_space_available
  * xfs: adjust allocation length in xfs_alloc_space_available
  * xfs: fix bogus minleft manipulations
  * xfs: bump up reserved blocks in xfs_alloc_set_aside
  * xfs: use the actual AG length when reserving blocks
  * xfs: use GPF_NOFS when allocating btree cursors
  * xfs: ignore leaf attr ichdr.count in verifier during log replay
  * xfs: optimise CRC updates
  * xfs: make xfs btree stats less huge
  * xfs: don't allow di_size with high bit set
  * xfs: error out if trying to add attrs and anextents &gt; 0
  * xfs: don't crash if reading a directory results in an unexpected hole
  * xfs: complain if we don't get nextents bmap records
  * xfs: check for bogus values in btree block headers
  * xfs: forbid AG btrees with level == 0
  * xfs: several xattr functions can be void
  * xfs: handle cow fork in xfs_bmap_trace_exlist
  * xfs: pass state not whichfork to trace_xfs_extlist
  * xfs: Move AGI buffer type setting to xfs_read_agi
  * xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
  * fs: xfs: libxfs: constify xfs_nameops structures
  * repair: use new extent lookup helpers in bmap_next_offset
  * xfs: use new extent lookup helpers in __xfs_bunmapi
  * xfs: use new extent lookup helpers in xfs_bmapi_write
  * xfs: use new extent lookup helpers in xfs_bmapi_read
  * xfs: new inode extent list lookup helpers
  * xfs: check minimum block size for CRC filesystems
  * xfs: provide helper for counting extents from if_bytes
  * xfs: check return value of _trans_reserve_quota_nblks
  * xfs: set XFS_DA_OP_OKNOENT in xfs_attr_get
- Removed now-obsolete patches:
  * Removed xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Removed xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Removed xfs_repair-fix-thread-creation-failure-recovery.patch
  * Removed fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1510920001">- Fix building on SLE11
- Added xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Added xfs_io-stat-treat-statfs.f_flags-as-optional.patch</changelog>
  <changelog author="lurodriguez@suse.com" date="1513684800">- Deletes already merged xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Deletes already merged xfs_io-stat-treat-statfs.f_flags-as-optional.patch
- Refreshes patch xfsprogs-docdir.diff
- Update to v4.14.0:
  * xfs_io: stat: treat statfs.f_flags as optional
  * xfs_io: stat: fix typo in statfs-&gt;f_flags
  * xfsprogs: fix wrong variable types in pwrite/pread code
  * xfs_io: Allow partial writes
  * xfs_io: Add RWF_NOWAIT to pwritev2()
  * xfs_io: Add support for pwritev2()
  * xfs_io: Disable -V if pwritev is not available
  * xfs_repair: always release btree buffers when refcountbt checks fail
  * misc: fix ubsan warnings
  * misc: enable thread sanitizer if the builder wants it
  * misc: enable gcc/clang address sanitizer if the builder wants it
  * misc: enable ubsan if the builder wants it
  * xfs_repair: fix cowextsize field checking and repairing
  * xfs_repair: clear DAX flag from non-file inodes
  * xfs_repair: fix bag memory overwrite problems
  * xfs_io: add new error injection knobs to inject command
  * xfsprogs: explicitly cast troublesome types to match printf  format specifiers
  * db: increase metadump's default overly long extent discard  threshold
  * build: define _DEFAULT_SOURCE with _BSD_SOURCE for preadv
  * xfsprogs: add xfs_spaceman to .gitignore
  * xfs_io: report io error for pwrite -W and -w
  * xfs_metadump: zap stale data in DIR2_LEAF1 dirs
  * metadump: update manpage for dirty log/obfuscation issue
  * kill off u_int*_t types
  * xfs: trim writepage mapping to within eof
  * xfs: handle error if xfs_btree_get_bufs fails
  * xfs: Fix bool initialization/comparison
  * xfs: Don't log uninitialised fields in inode structures
  * xfs: revert "xfs: factor rmap btree size into the indlen calculations"
  * xfs: perag initialization should only touch m_ag_max_usable for AG 0
  * xfs: fix compiler warnings
  * xfs: simplify the rmap code in xfs_bmse_merge
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents
  * xfs: move some code around inside xfs_bmap_shift_extents
  * xfs: use xfs_iext_get_extent in xfs_bmap_first_unused
  * xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert
  * xfs: add a xfs_iext_update_extent helper
  * xfs: relog dirty buffers during swapext bmbt owner change
  * xfs: skip bmbt block ino validation during owner change
  * xfs: don't log dirty ranges for ordered buffers
  * xfs: remove the ip argument to xfs_defer_finish
  * xfs: rename xfs_defer_join to xfs_defer_ijoin
  * xfs: refactor xfs_trans_roll
  * xfs: stop searching for free slots in an inode chunk when there are none</changelog>
  <changelog author="lurodriguez@suse.com" date="1519819200">- adds make_xfs_scrub_interp_explicit.patch, rpm lint complains about
  using env python, when this is used the dependency checker for rpm
  will not be able to resolve dependencies correctly, so an explicit
  interpreter is needed.
- Update to v4.15.0 as it contains major code refactor on mkfs/xfs_mkfs.c
  which would help to eventually consider completing FATE#324503. Changes
  in this release:
  * Fix spelling mistake in mkfs lazy superblock diagnostic
  * Fix grammar and spelling in strings and man pages
  * Add xfs_scrub_fail systemd service file docs entry
  * Update .gitignore list for generated scrub cron file
  * Several updates to use more modern Debian packaging
  * xfsprogs: Release v4.15.0-rc1
  * xfs_scrub: refactor outcome display into a separate helper
  * xfs_scrub: always init phase information
  * xfs_scrub: reclassify some of the warning messages
  * xfs_scrub: reclassify runtime errors
  * xfs_scrub: classify lack of ioctl support as a runtime error
  * xfs_scrub: remove preen mode
  * xfs_mdrestore: Don't rewind source file stream
  * xfs_mdrestore: Add -i option to built-in help
  * xfs_io: fix copy_file_range symbol name collision
  * xfs_scrub: kill dead code
  * xfs_scrub: close dir_fd if we don't get a DIR pointer
  * mkfs: don't create realtime filesystems with reflink enabled
  * xfs_scrub: handle scrub-only kernels more helpfully
  * xfs_scrub: wire up repair ioctl
  * debian/control: remove nonexistent libreadline5-dev build dependency
  * xfs_scrub: integrate services with systemd
  * xfs_scrub: create a script to scrub all xfs filesystems
  * xfs_scrub: progress indicator
  * xfs_scrub: fstrim the free areas if there are no errors on the filesystem
  * xfs_scrub: check summary counters
  * xfs_scrub: optionally use SCSI READ VERIFY commands to scrub data blocks on disk
  * xfs_scrub: scrub file data blocks
  * xfs_scrub: create infrastructure to read verify data blocks
  * xfs_scrub: create a bitmap data structure
  * xfs_scrub: warn about normalized Unicode name collisions
  * xfs_scrub: warn about suspicious characters in directory/xattr names
  * xfs_scrub: check directory connectivity
  * xfs_scrub: scan inodes
  * xfs_scrub: thread-safe stats counter
  * xfs_scrub: scan filesystem and AG metadata
  * xfs_scrub: wrap the scrub ioctl
  * xfs_scrub: filesystem counter collection functions
  * xfs_scrub: add file space map iteration functions
  * xfs_scrub: add space map iteration functions
  * xfs_scrub: add inode iteration functions
  * xfs_scrub: find XFS filesystem geometry
  * xfs_scrub: create an abstraction for a block device
  * xfs_scrub: figure out how many threads we're going to need
  * xfs_scrub: dispatch the various phases of the scrub program
  * xfs_scrub: set up command line argument parsing
  * xfs_scrub: common error handling
  * xfs_scrub: create online filesystem scrub program
  * mkfs: more sunit/swidth sanity checking
  * mkfs: always explain why numeric inputs are invalid
  * mkfs: don't call values 'illegal', they're invalid
  * mkfs: don't crash on dswidth overflow
  * misc: ubsan fixes
  * xfs_db: interpret inode timestamps as signed integers
  * xfsprogs: update dead urls
  * xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT
  * xfs_logprint: fix v3 inode formatting
  * libxfs: use a memory zone for log items
  * libxfs: use a memory zone for transactions
  * libxfs: remove unused buf_fsprivate3
  * xfs: add a proper transaction pointer to struct xfs_buf
  * xfs: remove wrappers around b_fspriv
  * find-api-violations: fix a broken grep pattern
  * xfs_repair: fix libxfs namespace problems
  * xfs_db: fix crash when field list selector string has trailing slash
  * xfs_db: check should deal with cow staging extents correctly
  * libhandle: zap fdhash in fshandle_destroy
  * xfs_io: add a new 'log_writes' command
  * xfs_io: add MAP_SYNC support to mmap()
  * mkfs: do not allow both "dev" and "name" subopts for log or realtime
  * mkfs: pass switch case value directly into getnum/getstr
  * mkfs: un-document removed logarithm based CLI options
  * mkfs: remove logarithm based CLI options
  * mkfs: resolve sector size CLI conflicts
  * mkfs: convert subopt name, val pairs to enums and declared arrays
  * mkfs: support arbitrary conflict specification
  * mkfs: protofile only needs to be set up once
  * mkfs: simplify minimum log size calculation
  * mkfs: use opts parameter during option parsing
  * mkfs: remove use-once default macros
  * mkfs: document sb_feat_args members
  * mkfs: invert project id width boolean name
  * mkfs: remove unused m_uuid in sb_feat_args
  * mkfs: Don't emit default config message yet
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: only skip rmap owner checks for unknown-owner rmap removal
  * xfs: always honor OWN_UNKNOWN rmap removal requests
  * xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order
  * xfs: move xfs_iext_insert tracepoint to report useful information
  * xfs: account for null transactions in bunmapi
  * xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute
  * xfs: add the ability to join a held buffer to a defer_ops
  * xfs: refactor buffer logging into buffer dirtying helper
  * xfs: remove "no-allocation" reservations for file creations
  * xfs: fix leaks on corruption errors in xfs_bmap.c
  * libxfs: libxfs_nproc should never return negative numbers
  * mkfs: tidy up definitions
  * mkfs: move error functions
  * mkfs: cleanup redundant temporary code
  * mkfs: factor log size calculations
  * mkfs: factor initial mount setup
  * mkfs: rework imaxpct calculation
  * mkfs: factor AG alignment
  * mkfs: factor AG geometry calculations
  * mkfs: factor rt device validation
  * mkfs: factor log device validation
  * mkfs: factor data device validation
  * mkfs: factor device opening
  * mkfs: rework stripe calculations
  * mkfs: factor rtdev extent size validation
  * mkfs: fix hidden parameter in DTOBT()
  * mkfs: factor out device size calculations
  * mkfs: factor inode size validation
  * mkfs: factor directory blocksize validation
  * mkfs: factor superblock feature validation
  * mkfs: factor log sector size validation
  * mkfs: factor blocksize validation
  * mkfs: factor sectorsize validation
  * mkfs: rename top level CLI parameters
  * mkfs: introduce default configuration structure
  * mkfs: factor secondary superblock updates
  * mkfs: factor writing AG headers
  * mkfs: factor out device preparation
  * mkfs: factor in memory superblock setup
  * mkfs: factor printing of mkfs config
  * mkfs: Introduce mkfs configuration structure
  * mkfs: factor sector subopts parser
  * mkfs: factor rt subopts parser
  * mkfs: factor naming subopts parser
  * mkfs: factor meta subopts parser
  * mkfs: factor log subopts parser
  * mkfs: factor inode subopts parser
  * mkfs: factor data subopts parser
  * mkfs: factor block subopts parser
  * mkfs: add generic subopt parsing table
  * mkfs: introduce a structure to hold CLI options
  * mkfs: make subopt table const
  * mkfs: disallow specifying the sector size of internal log
  * xfs_db: add missing padding fields
  * xfs_db: print structure padding fields consistently
  * xfs_repair: remove old workqueue stuff in favor of libfrog code
  * libhandle: add missing destructor
  * libfrog: add missing function fs_table_destroy
  * libfrog: move paths.c out of libxcmd
  * libfrog: move conversion factors out of libxcmd
  * libfrog: move topology code out of libxcmd
  * libfrog: create a threaded workqueue
  * libfrog: promote avl64 code from xfs_repair
  * libfrog: move list_sort out of libxfs
  * libfrog: add bit manipulation functions
  * libfrog: move libxfs_log2_roundup to libfrog
  * libfrog: move all the userspace support stuff into a new library
  * man: describe the metadata scrubbing ioctl
  * xfs_io: provide an interface to the scrub ioctls
  * xfs_io: add buf_lru_ref tag to inject table
  * xfs_io: pull xfs errortag definitions from libxfs
  * xfs_io: implement ranged fiemap query
  * xfs_io: fix gcc-7 related printf warnings
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: abstract out dev_t conversions
  * xfs: fix memory leak in xfs_iext_free_last_leaf
  * xfs: fix type usage
  * xfs: remove u_int* type usage
  * xfs: handle zero entries case in xfs_iext_rebalance_leaf
  * xfs: add comments documenting the rebalance algorithm
  * xfs: trivial indentation fixup for xfs_iext_remove_node
  * xfs: remove a superflous assignment in xfs_iext_remove_node
  * xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node
  * xfs: fix number of records handling in xfs_iext_split_leaf
  * xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static
  * xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h
  * xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent
  * xfs: remove the nr_extents argument to xfs_iext_remove
  * xfs: remove the nr_extents argument to xfs_iext_insert
  * xfs: use a b+tree for the in-core extent list
  * xfs: allow unaligned extent records in xfs_bmbt_disk_set_all
  * xfs: remove support for inlining data/extents into the inode fork
  * xfs: simplify xfs_reflink_convert_cow
  * xfs: introduce the xfs_iext_cursor abstraction
  * xfs: iterate over extents in xfs_bmap_extents_to_btree
  * xfs: iterate over extents in xfs_iextents_copy
  * xfs: pass an on-disk extent to xfs_bmbt_validate_extent
  * xfs: treat idx as a cursor in xfs_bmap_collapse_extents
  * xfs: treat idx as a cursor in xfs_bmap_del_extent_*
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real
  * xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real
  * xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real
  * xfs: convert remaining xfs_sb_version_... checks to bool
  * xfs: move error injection tags into their own file
  * xfs: remove inode log format typedef
  * xfs: remove the inode log format from the inode log item
  * xfs: remove redundant assignment to variable bit
  * xfs: compare btree block keys to parent block's keys during scrub
  * xfs: abort dir/attr btree operation if btree is obviously weird
  * xfs: add a new xfs_iext_lookup_extent_before helper
  * xfs: merge xfs_bmap_read_extents into xfs_iread_extents
  * xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent
  * xfs: don't rely on extent indices in xfs_bmap_insert_extents
  * xfs: don't rely on extent indices in xfs_bmap_collapse_extents
  * xfs: update got in xfs_bmap_shift_update_extent
  * xfs: remove xfs_bmse_shift_one
  * xfs: split xfs_bmap_shift_extents
  * xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS
  * xfs: remove if_rdev
  * xfs: remove the never fully implemented UUID fork format
  * xfs: remove XFS_BMAP_TRACE_EXLIST
  * xfs: move pre/post-bmap tracing into xfs_iext_update_extent
  * xfs: remove post-bmap tracing in xfs_bmap_local_to_extents
  * xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real
  * xfs: add a xfs_bmap_fork_to_state helper
  * xfs: scrub quota information
  * xfs: scrub realtime bitmap/summary
  * xfs: scrub directory parent pointers
  * xfs: scrub symbolic links
  * xfs: scrub extended attributes
  * xfs: scrub directory metadata
  * xfs: scrub inode block mappings
  * xfs: scrub inodes
  * xfs: scrub refcount btrees
  * xfs: scrub rmap btrees
  * xfs: scrub inode btrees
  * xfs: scrub free space btrees
  * xfs: scrub the AGI
  * xfs: scrub AGF and AGFL
  * xfs: scrub the secondary superblocks
  * xfs: scrub the shape of a metadata btree
  * xfs: probe the scrub ioctl
  * xfs: create an ioctl to scrub AG metadata
  * xfs: create inode pointer verifiers
  * xfs: refactor btree block header checking functions
  * xfs: refactor btree pointer checks
  * xfs: create block pointer check functions
  * xfs: remove xfs_bmbt_get_state
  * xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all
  * xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update
  * xfs: refactor xfs_bmap_add_extent_unwritten_real
  * xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_hole_real
  * xfs: refactor xfs_bmap_add_extent_hole_delay
  * xfs: refactor xfs_del_extent_real
  * xfs: use the state defines in xfs_bmap_del_extent_real
  * xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay}
  * xfs: move some more code into xfs_bmap_del_extent_real
  * xfs: use xfs_bmap_del_extent_delay for the data fork as well
  * xfs: rename bno to end in __xfs_bunmapi
  * xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi
  * xfs: use xfs_iext_get_extent instead of open coding it
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real</changelog>
  <changelog author="olaf@aepfle.de" date="1523966400">- xfsprogs-devel needs uuid/uuid.h, Require pkgconfig(uuid) (bsc#1089947)</changelog>
  <changelog author="jeffm@suse.com" date="1534852800">- mkfs: avoid divide-by-zero when hardware reports optimal i/o size as 0
  (bsc#1089777)
  - xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch</changelog>
  <changelog author="jeffm@suse.com" date="1534852801">- repair: shift inode back into place if corrupted by bad log
  replay (bsc#1105396).
  * Added 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch</changelog>
  <changelog author="jeffm@suse.com" date="1540209600">- Explictly disable systemd unit files for scrub (bsc#1105068).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1545220800">- xfs_repair: Fix root inode's parent when it's bogus for sf directory
  (bsc#1119063)
  * Add xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576000">- xfs_repair: Add missing braces to allow zeroing of corrupt log
  (bsc#1073421)
  * Add xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576001">- xfs_repair: allow '/' in attribute names (bsc#1122271)
  * Add xfsprogs-xfs_repair-allow-in-attribute-names.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1558353600">- xfs_info: enable offline (unmounted) filesystem geometry queries (bsc#1129859)
  * Add xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  * Add xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  * Add xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  * Add xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  * Add xfsprogs-xfs_db-add-a-superblock-info-command.patch
  * Add xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  * Add xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  * Add xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  * Add xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch</changelog>
</package>
<package pkgid="5416d855c751c2d033385b5d48607dd5398294e92e635243df2b0db29f2f5cdc" name="xfsprogs" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="lp151.7.3.1"/>
  <changelog author="jack@suse.cz" date="1448539200">- Update to 4.3.0
  * xfs_fsr: improved temp file attr fork handling
  * libxfs: output verifier names in warnings
  * xfs_repair: enable verifier corruption warnings on very verbose
    output settings
  * xfs_fsr: abstract mntinfo/mntent differences
  * xfs_io: reflink and dedupe operation support
  * libxcmd: factoring of runtime reporting
  * man page fixes
  * xfs_db: blockget/blocktrash support for v5 filesystems
  * xfs_repair: many directory/attr cleanups and fixes
  * Log zeroing rework for v5 filesystems to prevent log sequence
    numbers from going backwards
- xfsprogs-ppc64.diff: Removed since we use asm/types.h for definitions now</changelog>
  <changelog author="mpluskal@suse.com" date="1451390400">- Trigger regeneration of initrd n recent releases (bsc#960273)
- Remove conditions for unsupported releases
- Make building more verbose</changelog>
  <changelog author="mlin@suse.com" date="1459166400">- Update to 4.5.0
  * xfs_io: prevent divide-by-zero on random IO
  * xfs_db: dquot command documentation fixes
  * xfs_quota: better command line parsing and documentation
  * libxfs: update to match kernel 4.5-rc1 code base
  * xfs_io: add DAX inode flag support
  * repair: scalability improvements on large corrupt filesystems
  * repair: directory rebuild fixes
  * mdrestore: progress accounting now works
  * metadump: fix btree block unused region zeroing
  * quota: timer command fixes
  * mkfs: man page cleanups
  * xfs_io: reflink, dedupe and other fixes
  * quota: Q_XGETNEXTQUOTA support
  * build cleanups for alternate C librarys
  * db: check fixes for sparse inodes
  * various: Fixes for Coverity reports
  * xfs_io: Document zero and help commands
  * mkfs: DIO can use logical sector size limits
  * repair: don't reset log cycle numbers when zeroing
  * db: add ability to format log to a specific cycle</changelog>
  <changelog author="jeffm@suse.com" date="1494936000">- Advise user of fs recovery options when we fail to mount (fate#320443)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1494936001">- Update to 4.9.0
  * xfs_quota: handle wrapped id from GETNEXTQUOTA
  * xfs_repair: don't indicate dirtiness if FSGEOMETRY fails
  * xfs_repair: junk leaf attribute if count == 0
  * xfs_repair: fix some potential null pointer deferences
  * xfs_repair: fix bogus rmapbt record owner check
  * xfs.h: require transparent LFS for all users
  * xfs_io: Fix initial -m option
  * xfs_io: add command line option -i to start an idle thread
  * xfsprogs: Update FSF address in COPYING file
  * mkfs.xfs: format reflink enabled filesystems
  * xfs_repair: use thread pools to sort rmap data
  * xfs_repair: check for mergeable refcount records
  * xfs_repair: use range query when while checking rmaps
  * xfs_repair: check the CoW extent size hint
  * xfs_repair: complain about copy-on-write leftovers
  * xfs_repair: rebuild the refcount btree
  * xfs_repair: check the refcount btree against our observed reference counts when -n
  * xfs_repair: fix inode reflink flags
  * xfs_repair: record reflink inode state
  * xfs_repair: process reverse-mapping data into refcount data
  * xfs_repair: handle multiple owners of data blocks
  * xfs_repair: check the existing refcount btree
  * xfs_repair: fix get_agino_buf to avoid corrupting inodes
  * xfs_logprint: support bmap redo items
  * xfs_logprint: support refcount redo items
  * xfs_logprint: support cowextsize reporting in log contents
  * xfs_io: try to unshare copy-on-write blocks via fallocate
  * xfs_io: provide long-format help for falloc
  * xfs_io: support injecting the 'per-AG reservation critically low' error
  * xfs_io: add refcount+bmap error injection types
  * xfs_io: get and set the CoW extent size hint
  * libxfs: add autoconf mechanism to override system header fsxattr
  * xfs_io: bmap should support querying CoW fork, shared blocks
  * xfs_growfs: report the presence of the reflink feature
  * xfs_db: print one array element per line
  * xfs_db: deal with the CoW extent size hint
  * xfs_db: metadump should copy the refcount btree too
  * xfs_db: add support for checking the refcount btree
  * xfs_db: dump refcount btree data
  * libxfs: add fsxattr flags and fields for cowextsize
  * libxfs: free the CoW fork from an inode
  * libxfs: plumb in bmap deferred op log items
  * libxfs: plumb in refcount deferred op log items
  * libxfs: add xfs_refcount.h to the standard include list
  * libxfs: initialize the in-core mount context for refcount btrees
  * xfs_buflock: handling parsing errors more gracefully
  * xfs_logprint: fix up the RUI printing code to reflect new format
  * xfs: defer should abort intent items if the trans roll fails
  * xfs: add xfs_trim_extent
  * libxfs: clean up _calc_dquots_per_chunk
  * xfs: rework refcount cow recovery error handling
  * xfs: implement swapext for rmap filesystems
  * xfs: recognize the reflink feature bit
  * xfs: simulate per-AG reservations being critically low
  * xfs: don't mix reflink and DAX mode for now
  * xfs: check for invalid inode reflink flags
  * xfs: convert unwritten status of reverse mappings for shared files
  * xfs: use interval query for rmap alloc operations on shared files
  * xfs: add shared rmap map/unmap/convert log item types
  * xfs: increase log reservations for reflink
  * xfs: try other AGs to allocate a BMBT block
  * xfs: preallocate blocks for worst-case btree expansion
  * xfs: create a separate cow extent size hint for the allocator
  * xfs: teach get_bmapx about shared extents and the CoW fork
  * xfs: store in-progress CoW allocations in the refcount btree
  * xfs: support removing extents from CoW fork
  * xfs: support allocating delayed extents in CoW fork
  * xfs: support bmapping delalloc extents in the CoW fork
  * xfs: introduce the CoW fork
  * xfs: don't allow reflinked dir/dev/fifo/socket/pipe files
  * xfs: add reflink feature flag to geometry
  * xfs: return work remaining at the end of a bunmapi operation
  * xfs: implement deferred bmbt map/unmap operations
  * xfs: pass bmapi flags through to bmap_del_extent
  * xfs: map an inode's offset to an exact physical block
  * xfs: log bmap intent items
  * xfs: create bmbt update intent log items
  * xfs: introduce reflink utility functions
  * xfs: reserve AG space for the refcount btree root
  * xfs: adjust refcount when unmapping file blocks
  * xfs: connect refcount adjust functions to upper layers
  * xfs: adjust refcount of an extent of blocks in refcount btree
  * xfs: log refcount intent items
  * xfs: create refcount update intent log items
  * xfs: add refcount btree operations
  * xfs: account for the refcount btree in the alloc/free log reservation
  * xfs: define the on-disk refcount btree format
  * xfs: refcount btree add more reserved blocks
  * xfs: introduce refcount btree definitions
  * xfs: remote attribute blocks aren't really userdata
  * xfs: set up per-AG free space reservations
  * xfs: defer should allow -&gt;finish_item to request a new transaction
  * xfs: count the blocks in a btree
  * xfs: create a standard btree size calculator code
  * xfs: convert RUI log formats to use variable length arrays
  * xfs: track log done items directly in the deferred pending work item
  * xfs: fix superblock inprogress check
- Update to 4.8.0
  * Add support for reflinks
  * xfs_io: fix inode command with "-n" for bogus inode
  * xfs_io: fix inode command help and argsmax
  * xfs_repair: add freesp btree block overflow to the free space
  * xfs_repair: fix bogosity when rmapping new AGFL blocks
  * libxcmd: fix counting of xfs entries in fs_table_insert
  * xfs_copy: Fix meta UUID handling on multiple copies
  * xfs_repair: fix segfault from uninitialized tp in mv_orphanage
  * xfs_io: allow chattr &amp; chproj on foreign filesystems
  * xfs_quota: fix free command for foreign fs
  * xfs_quota: un-flag non-foreign-capable commands
  * xfs_quota: Enable 3 more foreign commands
  * xfs_quota: add case for foreign fs, disabled regardless of foreign_allowed
  * xfs_quota: print and path output formatting: maintain reverse compatibility
  * libxcmd: populate fs table with xfs entries first, foreign entries last
  * xfs_repair: exit with status 2 if log dirtiness is unknown
  * xfs_db: pass the inode cluster offset when copying inodes
  * xfs_repair: don't crash on ENOSPC rebuilding a btree
  * libxfs/linux.c: Replace use of ustat by stat
  * db: write via array indexing doesn't work
  * xfs_db: properly set dquot_buf when operating on dquot
  * xfs_quota: fix missing break after foreign_allowed option
  * xfs_db: add crc manipulation commands
  * xfs_quota: certain commands must always be available
  * xfs_quota: add capabilities for use on non-XFS filesystems
  * xfs_quota: wire up XFS_GETQSTATV
  * xfs_metadump: don't warn about unobfuscated log with -o
  * xfs_repair: fix naming problems in repair/rmap.c
  * misc: fix libxfs api violations
  * misc: fix Coverity errors
  * libxcmd: fix mount option parsing to find rt/log devices
  * xfs: simple btree query range should look right if LE lookup fails
  * xfs: fix some key handling problems in _btree_simple_query_range
  * xfs: don't perform lookups on zero-height btrees
  * mkfs.xfs: create filesystems with reverse-mappings
  * mkfs: set agsize prior to calculating minimum log size
  * xfs_repair: check for impossible rmap record field combinations
  * xfs_repair: look for mergeable rmaps
  * xfs_repair: merge data &amp; attr fork reverse mappings
  * xfs_repair: add per-AG btree blocks to rmap data and add to rmapbt
  * xfs_repair: rebuild reverse-mapping btree
  * xfs_repair: check existing rmapbt entries against observed rmaps
  * xfs_repair: add fixed-location per-AG rmaps
  * xfs_repair: add inode bmbt block rmaps
  * xfs_repair: record and merge raw rmap data
  * xfs_repair: collect reverse-mapping data for refcount/rmap tree rebuilding
  * xfs_repair: create a slab API for allocating arrays in large chunks
  * xfs_repair: fix fino_bno calculation when rmapbt is enabled
  * xfs_repair: use rmap btree data to check block types
  * xfs_logprint: support rmap redo items
  * xfs_io: add rmap-finish error injection type
  * xfs_growfs: report rmapbt presence
  * xfs_db: introduce the 'fsmap' command to find what owns a set of fsblocks
  * xfs_db: copy the rmap btree
  * xfs_db: spot check rmapbt
  * xfs_db: display rmap btree contents
  * libxfs: add deferred ops item handlers for userspace
  * libxfs: fix various oddities in the kernel import
  * xfs: store rmapbt block count in the AGF
  * xfs_io: add free-extent error injection type
  * xfs_logprint: fix formatting issues with the EFI printing code
  * xfs_repair: preserve in-core meta_uuid while zeroing unused sb portions
  * xfs_io: bmap should print 'delalloc', not '-2'
  * xfs_buflock: add a tool that can be used to find buffer deadlocks
  * libxfs: fix xfs_isset pointer calculation
  * xfs: increase XFS_BTREE_MAXLEVELS to fit the rmapbt
  * xfs: change xfs_bmap_{finish,cancel,init,free} -&gt; xfs_defer_*
  * xfs: rework xfs_bmap_free callers to use xfs_defer_ops
  * xfs: enable the xfs_defer mechanism to process extents to free
  * xfs: introduce interval queries on btrees
  * xfs: support btrees with overlapping intervals for keys
  * xfs: add function pointers for get/update keys to the btree
  * xfs: during btree split, save new block key &amp; ptr for future insertion
  * xfs: set *stat=1 after iroot realloc
  * xfs: fix locking of the rt bitmap/summary inodes
  * xfs: fix attr shortform structure alignment on cris
- Update to 4.7.0
  * xfs_quota: fall back silently if XFS_GETNEXTQUOTA fails
  * xfs_io: implement 'copy_range' command
  * xfs_repair: low memory shouldn't indicate corruption on exit
  * xfs_repair: don't call xfs_sb_quota_from_disk twice
  * xfs_repair: resolve Coverity OVERFLOW_BEFORE_WIDEN
  * libxfs: fix double free in libxfs_alloc_file_space
  * libxfs: fix use after from in xfs_trans_roll
  * xfs: always set rvalp in xfs_dir2_node_trim_free
  * xfs: borrow indirect blocks from freed extent when available
  * xfs: update freeblocks counter after extent deletion
  * xfs: fix computation of inode btree maxlevels
  * xfs_check: process sparse inode chunks correctly
  * xfs_db: Revert "xfs_db: make check work for sparse inodes"
  * xfs_repair: set rsumino version to 2
  * mkfs: better error with incorrect b/s value suffix usage
  * mkfs: fix -l su minval
  * xfs.h: define XFS_IOC_FREEZE even if FIFREEZE is defined
  * xfs_quota: only round up timer reporting &gt; 1 day
  * xfs_quota: check report_mount return value
  * xfs_repair: new secondary superblock search method
  * libxcmd: generalize topology functions
  * xfs_db: defang frag command
  * db: limit AGFL bno array printing
  * xfs_db: allow recalculating CRCs on invalid metadata
  * xfs_db: fix unaligned accesses
  * metadump: limit permissible sector sizes
  * mkfs: conflicting values with disabled crc should fail
  * mkfs: add optional 'reason' for illegal_option
  * mkfs: unit conversions are case insensitive
  * mkfs: don't treat files as though they are block devices
  * mkfs: add string options to generic parsing
  * mkfs: encode conflicts into parsing table
  * mkfs: merge getnum
  * mkfs: table based parsing for converted parameters
  * mkfs: add respecification detection to generic parsing
  * mkfs: use getnum_checked for all ranged parameters
  * mkfs: getbool is redundant
  * mkfs: structify input parameter passing
  * mkfs: validate logarithmic parameters sanely
  * mkfs: validate all input values
  * mkfs: Sanitise the superblock feature macros
  * mkfs: sanitise ftype parameter values.
  * xfsprogs: use common code for multi-disk detection
  * xfs_repair: fix agf limit error messages
  * xfs_quota: print quota id number if the name can't be found
  * xfs_quota: fully support users and groups beginning with digits
  * xfs_io: allow mmap command to reserve some free space
  * xfs_io: modify argument errors of mremap command
  * Merge branch 'progs-misc-fixes-for-4.6' into for-master
  * Merge branch 'libxfs-4.6-sync' into for-master
  * xfs_io: implement 'inode' command
  * mkfs: fix crash when initializing rbmip
  * libxfs: fix up mismerge in libxfs_iflush_int
  * xfs: RT bitmap and summary buffers need verifiers
  * xfs: RT bitmap and summary buffers are not typed
  * xfs: handle errors from -&gt;free_blocks in xfs_btree_kill_iroot
  * xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk</changelog>
  <changelog author="jeffm@suse.com" date="1496404800">- fsr: fix uninitialized fs usage after timeout (bsc#1002699).
  * Added fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Fix crash in xfs_repair when threads fail to start (bsc#1019938).
  * Added xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Added xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Added xfs_repair-fix-thread-creation-failure-recovery.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jeffm@suse.com" date="1510920000">- Update to 4.13.1
  * mkfs: don't overflow the subopts array
- Update to 4.13.0
  * xfs_repair: handle missing extent states
  * mkfs: pass a custom cowextsize into the created filesystem
  * xfs_db: version command misses RMAPBT feature string
  * xfs_repair: don't use do_warn for normal log message
  * libxfs: remove getcwd/chdir dance from initialization
  * xfs_repair: take the ag_lock before recording rmap for a bmbt record
  * mkfs.xfs: Don't stagger AG for a single disk
  * xfs: fix inobt inode allocation search optimization
  * xfs_io: clarify the fsmap documentation
  * fiemap: Fix semantics of max_extents (-n arguments)
  * xfs_repair: fix thread creation failure recovery
  * xfs_repair: add prefetch trace calls to debug thread creation failures
  * xfs_repair: clear pthread_t when pthread_create fails
  * xfs_io: add seek consistency checks
  * fsr: fix uninitialized fs usage after timeout
  * xfs_db: bit fuzzing should read the right bit when flipping
  * xfs_db: make write/fuzz -c and -d work on non-crc filesystems
  * xfs_db: free field list when failing out of fuzz
  * xfs_db: reset metadump output flag
  * xfs_db: btdump should avoid eval for push and pop of cursor
  * xfs_db: use TYP_F_CRC_FUNC for inodes &amp; dquots
  * xfs_db: introduce fuzz command
  * xfs_db: write values into dir/attr blocks and recalculate CRCs
  * xfs_db: print attribute remote value blocks
  * xfs_db: dump dir/attr btrees
  * xfs_db: fix metadump redirection (again)
  * xfs_repair: fix symlink target length checks by changing MAXPATHLEN to XFS_SYMLINK_MAXLEN
  * xfs_metadump: properly handle obfuscation of all remote attribute blocks
  * xfs_io: allow lsattr &amp; lsproj on foreign filesystems
  * libxfs: init -&gt;b_maps on contig buffers for uncached compatibility
  * xfs_db: associate proper type with free inode btree root
  * xfs_io: Print filesystem statfs flags in 'statfs' command
  * xfs: fix multi-AG deadlock in xfs_bunmapi
  * xfs: check that dir block entries don't off the end of the buffer
  * xfs: check _alloc_read_agf buffer pointer before using
  * xfs: set firstfsb to NULLFSBLOCK before feeding it to _bmapi_write
  * xfs: check _btree_check_block value
  * xfs: don't crash on unexpected holes in dir/attr btrees
  * xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub
  * xfs: try to avoid blowing out the transaction reservation when bunmaping a shared extent
- Update to 4.12.0
  * libxfs: propagate transaction block reservations
  * xfs_db: properly set inode type
  * xfs_db: redirect printfs when metadumping to stdout
  * mkfs.xfs: allow specification of 0 data stripe width &amp; unit
  * mkfs: set inode alignment and cluster size for minimum log size estimation
  * mkfs: set agblklog when we're verifying minimum log size
  * libxfs: fix fsmap.h inclusion
  * xfs_db: identify attr dabtree field types correctly
  * xfs_spaceman: fix potential overflowing expression in trim_f()
  * xfs_spaceman: close open file for error case in openfile()
  * xfs_spaceman: fix potential memory leak by malloc in scan_ag
  * xfs_db: improve argument naming in set_cur and set_iocur_type
  * xfs_db: update buffer size when new type is set
  * xfs_spaceman: add group summary mode
  * xfs_spaceman: add a man page
  * xfs_spaceman: Free space mapping command
  * xfs_spaceman: add new speculative prealloc control
  * xfs_spaceman: add FITRIM support
  * xfs_spaceman: space management tool
  * xfs_repair: replace rmap_compare with libxfs version
  * xfs_io: support the new getfsmap ioctl
  * xfs: introduce the XFS_IOC_GETFSMAP ioctl
  * libxfs: use crc32c slice-by-8 variant by default
  * libxcmd: add cvt{int, long} to convert strings to int and long
  * metadump: warn about corruption if log is dirty
  * xfs_metadump: tag metadump image with informational flags
  * xfs_repair: handle reading superblock from image on larger sector size filesystem
  * xfs_db: add alignment filter to freesp command
  * xfs_growfs: ensure target path is an active xfs mountpoint
  * libxfs: fix xfs_trans_alloc_empty namespace
  * xfs: fix unaligned access in xfs_btree_visit_blocks
  * xfs: avoid mount-time deadlock in CoW extent recovery
  * xfs: fix indlen accounting error on partial delalloc conversion
  * xfs: abstract PF_FSTRANS to PF_MEMALLOC_NOFS
  * xfs: reserve enough blocks to handle btree splits when remapping
  * xfs: simplify validation of the unwritten extent bit
  * xfs: introduce xfs_bmapi_remap
  * xfs: pass individual arguments to xfs_bmap_add_extent_hole_real
  * xfs: fix integer truncation in xfs_bmap_remap_alloc
  * xfs: simplify xfs_calc_dquots_per_chunk
  * xfs: implement the GETFSMAP ioctl
  * xfs: add a couple of queries to iterate free extents in the rtbitmap
  * xfs: create a function to query all records in a btree
  * xfs: provide a query_range function for freespace btrees
  * xfs: plumb in needed functions for range querying of the freespace btrees
  * xfs: fix up inode validation failure message
- Update to 4.11.0
  * xfs_io: add missed quotation marks in man page
  * xfs_io: add missed inode command into man page
  * xfs_io: fix statx call for changed UAPI
  * xfs_db: dump metadata btrees via 'btdump'
  * xfs_db: use iocursor type to guess btree geometry if bad magic
  * xfs_db: don't print arrays off the end of a buffer
  * mkfs.xfs: Assign proper defaults to rmapbt and reflink flags
  * xfs_io: Add statx support for PowerPC architecture
  * xfs_io: fix statx definition for non-x86 architecture
  * xfs_db: allow write -d to dqblks
  * xfs_db: allow write -d to inodes
  * xfs_io: hook up statx
  * xfsprogs: fix build dep on configure.ac
  * xfs_repair: pass btnum not magic to phase5 functions
  * xfs_io: Fix "falloc -p" to pass KEEP_SIZE
  * xfs_repair: warn about dirty log with -n option
  * xfs_repair: detect invalid zero-sized symlink inodes
  * xfs_io: support shutdown command on foreign fses
  * libxfs: fix xfs_extent_busy_flush macro definition
  * xfs: verify inline directory data forks
  * xfs: try any AG when allocating the first btree block when reflinking
  * xfs: use iomap new flag for newly allocated delalloc blocks
  * xfs: tune down agno asserts in the bmap code
  * xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
  * xfs: split indlen reservations fairly when under reserved
  * xfs: handle indlen shortage on delalloc extent merge
  * xfs: improve handling of busy extents in the low-level allocator
  * xfs: go straight to real allocations for direct I/O COW writes
  * xfs: allow unwritten extents in the CoW fork
  * xfs: verify free block header fields
  * xfs: check for obviously bad level values in the bmbt root
  * xfs: filter out obviously bad btree pointers
  * xfs: fail _dir_open when readahead fails
  * xfs: fix toctou race when locking an inode to access the data map
  * xfs: glean crc status from mp not flags in xfs_btree_init_block_int
- Update to 4.10.0
  * xfs_metadump: ignore attr leaf with 0 entries
  * libxfs: sync up FSGETXATTR names and definitions with the kernel
  * xfsprogs: Fix building xfsprogs on 32-bit platforms (again)
  * xfs: extsize hints are not unlikely in xfs_bmap_btalloc
  * xfs: use per-AG reservations for the finobt
  * xfs: only update mount/resv fields on success in __xfs_ag_resv_init
  * xfs: verify dirblocklog correctly
  * xfs: fix COW writeback race
  * xfs: fix xfs_mode_to_ftype() prototype
  * xfs_db: Interpret inode's di_format field as unsigned
  * xfs_repair: trash dirattr btrees that cycle to the root
  * xfs_repair: strengthen geometry checks
  * xfs_db: fix the 'source' command when passed as a -c option
  * libxfs: sanitize agcount on load
  * xfs_io: add DAX and CoW extent-size flags to chattr manpage
  * xfs_io: fix missing syncfs command
  * xfs_logprint: handle log operation split of inode item correctly
  * xfs: sanity check inode di_mode
  * xfs: sanity check directory inode di_size
  * xfs_repair: update the manual content about xfs_repair exit status
  * xfs_repair.8: document dirty log conditions
  * xfs_io: implement 'utimes' command
  * libxcmd: add non-iterating user commands
  * xfs_io: make various commands one-shot only
  * libxcmd: don't check generic library commands
  * libxcmd: merge command() and iterate_command()
  * libxcmd: rename args_command to command_iterator
  * libxcmd: check CMD_FLAG_GLOBAL inside args_command()
  * xfs_io: fix some documentation problems
  * xfs_io: fix the minimum arguments to the reflink command
  * xfs_io: prefix dedupe command error messages consistently
  * xfs_io: Improvements to copy_range return code handling
  * xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
  * xfs_logprint: di_gen is unsigned
  * xfs_io: fix building with musl
  * xfs: don't rely on -&gt;total in xfs_alloc_space_available
  * xfs: adjust allocation length in xfs_alloc_space_available
  * xfs: fix bogus minleft manipulations
  * xfs: bump up reserved blocks in xfs_alloc_set_aside
  * xfs: use the actual AG length when reserving blocks
  * xfs: use GPF_NOFS when allocating btree cursors
  * xfs: ignore leaf attr ichdr.count in verifier during log replay
  * xfs: optimise CRC updates
  * xfs: make xfs btree stats less huge
  * xfs: don't allow di_size with high bit set
  * xfs: error out if trying to add attrs and anextents &gt; 0
  * xfs: don't crash if reading a directory results in an unexpected hole
  * xfs: complain if we don't get nextents bmap records
  * xfs: check for bogus values in btree block headers
  * xfs: forbid AG btrees with level == 0
  * xfs: several xattr functions can be void
  * xfs: handle cow fork in xfs_bmap_trace_exlist
  * xfs: pass state not whichfork to trace_xfs_extlist
  * xfs: Move AGI buffer type setting to xfs_read_agi
  * xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
  * fs: xfs: libxfs: constify xfs_nameops structures
  * repair: use new extent lookup helpers in bmap_next_offset
  * xfs: use new extent lookup helpers in __xfs_bunmapi
  * xfs: use new extent lookup helpers in xfs_bmapi_write
  * xfs: use new extent lookup helpers in xfs_bmapi_read
  * xfs: new inode extent list lookup helpers
  * xfs: check minimum block size for CRC filesystems
  * xfs: provide helper for counting extents from if_bytes
  * xfs: check return value of _trans_reserve_quota_nblks
  * xfs: set XFS_DA_OP_OKNOENT in xfs_attr_get
- Removed now-obsolete patches:
  * Removed xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Removed xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Removed xfs_repair-fix-thread-creation-failure-recovery.patch
  * Removed fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1510920001">- Fix building on SLE11
- Added xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Added xfs_io-stat-treat-statfs.f_flags-as-optional.patch</changelog>
  <changelog author="lurodriguez@suse.com" date="1513684800">- Deletes already merged xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Deletes already merged xfs_io-stat-treat-statfs.f_flags-as-optional.patch
- Refreshes patch xfsprogs-docdir.diff
- Update to v4.14.0:
  * xfs_io: stat: treat statfs.f_flags as optional
  * xfs_io: stat: fix typo in statfs-&gt;f_flags
  * xfsprogs: fix wrong variable types in pwrite/pread code
  * xfs_io: Allow partial writes
  * xfs_io: Add RWF_NOWAIT to pwritev2()
  * xfs_io: Add support for pwritev2()
  * xfs_io: Disable -V if pwritev is not available
  * xfs_repair: always release btree buffers when refcountbt checks fail
  * misc: fix ubsan warnings
  * misc: enable thread sanitizer if the builder wants it
  * misc: enable gcc/clang address sanitizer if the builder wants it
  * misc: enable ubsan if the builder wants it
  * xfs_repair: fix cowextsize field checking and repairing
  * xfs_repair: clear DAX flag from non-file inodes
  * xfs_repair: fix bag memory overwrite problems
  * xfs_io: add new error injection knobs to inject command
  * xfsprogs: explicitly cast troublesome types to match printf  format specifiers
  * db: increase metadump's default overly long extent discard  threshold
  * build: define _DEFAULT_SOURCE with _BSD_SOURCE for preadv
  * xfsprogs: add xfs_spaceman to .gitignore
  * xfs_io: report io error for pwrite -W and -w
  * xfs_metadump: zap stale data in DIR2_LEAF1 dirs
  * metadump: update manpage for dirty log/obfuscation issue
  * kill off u_int*_t types
  * xfs: trim writepage mapping to within eof
  * xfs: handle error if xfs_btree_get_bufs fails
  * xfs: Fix bool initialization/comparison
  * xfs: Don't log uninitialised fields in inode structures
  * xfs: revert "xfs: factor rmap btree size into the indlen calculations"
  * xfs: perag initialization should only touch m_ag_max_usable for AG 0
  * xfs: fix compiler warnings
  * xfs: simplify the rmap code in xfs_bmse_merge
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents
  * xfs: move some code around inside xfs_bmap_shift_extents
  * xfs: use xfs_iext_get_extent in xfs_bmap_first_unused
  * xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert
  * xfs: add a xfs_iext_update_extent helper
  * xfs: relog dirty buffers during swapext bmbt owner change
  * xfs: skip bmbt block ino validation during owner change
  * xfs: don't log dirty ranges for ordered buffers
  * xfs: remove the ip argument to xfs_defer_finish
  * xfs: rename xfs_defer_join to xfs_defer_ijoin
  * xfs: refactor xfs_trans_roll
  * xfs: stop searching for free slots in an inode chunk when there are none</changelog>
  <changelog author="lurodriguez@suse.com" date="1519819200">- adds make_xfs_scrub_interp_explicit.patch, rpm lint complains about
  using env python, when this is used the dependency checker for rpm
  will not be able to resolve dependencies correctly, so an explicit
  interpreter is needed.
- Update to v4.15.0 as it contains major code refactor on mkfs/xfs_mkfs.c
  which would help to eventually consider completing FATE#324503. Changes
  in this release:
  * Fix spelling mistake in mkfs lazy superblock diagnostic
  * Fix grammar and spelling in strings and man pages
  * Add xfs_scrub_fail systemd service file docs entry
  * Update .gitignore list for generated scrub cron file
  * Several updates to use more modern Debian packaging
  * xfsprogs: Release v4.15.0-rc1
  * xfs_scrub: refactor outcome display into a separate helper
  * xfs_scrub: always init phase information
  * xfs_scrub: reclassify some of the warning messages
  * xfs_scrub: reclassify runtime errors
  * xfs_scrub: classify lack of ioctl support as a runtime error
  * xfs_scrub: remove preen mode
  * xfs_mdrestore: Don't rewind source file stream
  * xfs_mdrestore: Add -i option to built-in help
  * xfs_io: fix copy_file_range symbol name collision
  * xfs_scrub: kill dead code
  * xfs_scrub: close dir_fd if we don't get a DIR pointer
  * mkfs: don't create realtime filesystems with reflink enabled
  * xfs_scrub: handle scrub-only kernels more helpfully
  * xfs_scrub: wire up repair ioctl
  * debian/control: remove nonexistent libreadline5-dev build dependency
  * xfs_scrub: integrate services with systemd
  * xfs_scrub: create a script to scrub all xfs filesystems
  * xfs_scrub: progress indicator
  * xfs_scrub: fstrim the free areas if there are no errors on the filesystem
  * xfs_scrub: check summary counters
  * xfs_scrub: optionally use SCSI READ VERIFY commands to scrub data blocks on disk
  * xfs_scrub: scrub file data blocks
  * xfs_scrub: create infrastructure to read verify data blocks
  * xfs_scrub: create a bitmap data structure
  * xfs_scrub: warn about normalized Unicode name collisions
  * xfs_scrub: warn about suspicious characters in directory/xattr names
  * xfs_scrub: check directory connectivity
  * xfs_scrub: scan inodes
  * xfs_scrub: thread-safe stats counter
  * xfs_scrub: scan filesystem and AG metadata
  * xfs_scrub: wrap the scrub ioctl
  * xfs_scrub: filesystem counter collection functions
  * xfs_scrub: add file space map iteration functions
  * xfs_scrub: add space map iteration functions
  * xfs_scrub: add inode iteration functions
  * xfs_scrub: find XFS filesystem geometry
  * xfs_scrub: create an abstraction for a block device
  * xfs_scrub: figure out how many threads we're going to need
  * xfs_scrub: dispatch the various phases of the scrub program
  * xfs_scrub: set up command line argument parsing
  * xfs_scrub: common error handling
  * xfs_scrub: create online filesystem scrub program
  * mkfs: more sunit/swidth sanity checking
  * mkfs: always explain why numeric inputs are invalid
  * mkfs: don't call values 'illegal', they're invalid
  * mkfs: don't crash on dswidth overflow
  * misc: ubsan fixes
  * xfs_db: interpret inode timestamps as signed integers
  * xfsprogs: update dead urls
  * xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT
  * xfs_logprint: fix v3 inode formatting
  * libxfs: use a memory zone for log items
  * libxfs: use a memory zone for transactions
  * libxfs: remove unused buf_fsprivate3
  * xfs: add a proper transaction pointer to struct xfs_buf
  * xfs: remove wrappers around b_fspriv
  * find-api-violations: fix a broken grep pattern
  * xfs_repair: fix libxfs namespace problems
  * xfs_db: fix crash when field list selector string has trailing slash
  * xfs_db: check should deal with cow staging extents correctly
  * libhandle: zap fdhash in fshandle_destroy
  * xfs_io: add a new 'log_writes' command
  * xfs_io: add MAP_SYNC support to mmap()
  * mkfs: do not allow both "dev" and "name" subopts for log or realtime
  * mkfs: pass switch case value directly into getnum/getstr
  * mkfs: un-document removed logarithm based CLI options
  * mkfs: remove logarithm based CLI options
  * mkfs: resolve sector size CLI conflicts
  * mkfs: convert subopt name, val pairs to enums and declared arrays
  * mkfs: support arbitrary conflict specification
  * mkfs: protofile only needs to be set up once
  * mkfs: simplify minimum log size calculation
  * mkfs: use opts parameter during option parsing
  * mkfs: remove use-once default macros
  * mkfs: document sb_feat_args members
  * mkfs: invert project id width boolean name
  * mkfs: remove unused m_uuid in sb_feat_args
  * mkfs: Don't emit default config message yet
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: only skip rmap owner checks for unknown-owner rmap removal
  * xfs: always honor OWN_UNKNOWN rmap removal requests
  * xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order
  * xfs: move xfs_iext_insert tracepoint to report useful information
  * xfs: account for null transactions in bunmapi
  * xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute
  * xfs: add the ability to join a held buffer to a defer_ops
  * xfs: refactor buffer logging into buffer dirtying helper
  * xfs: remove "no-allocation" reservations for file creations
  * xfs: fix leaks on corruption errors in xfs_bmap.c
  * libxfs: libxfs_nproc should never return negative numbers
  * mkfs: tidy up definitions
  * mkfs: move error functions
  * mkfs: cleanup redundant temporary code
  * mkfs: factor log size calculations
  * mkfs: factor initial mount setup
  * mkfs: rework imaxpct calculation
  * mkfs: factor AG alignment
  * mkfs: factor AG geometry calculations
  * mkfs: factor rt device validation
  * mkfs: factor log device validation
  * mkfs: factor data device validation
  * mkfs: factor device opening
  * mkfs: rework stripe calculations
  * mkfs: factor rtdev extent size validation
  * mkfs: fix hidden parameter in DTOBT()
  * mkfs: factor out device size calculations
  * mkfs: factor inode size validation
  * mkfs: factor directory blocksize validation
  * mkfs: factor superblock feature validation
  * mkfs: factor log sector size validation
  * mkfs: factor blocksize validation
  * mkfs: factor sectorsize validation
  * mkfs: rename top level CLI parameters
  * mkfs: introduce default configuration structure
  * mkfs: factor secondary superblock updates
  * mkfs: factor writing AG headers
  * mkfs: factor out device preparation
  * mkfs: factor in memory superblock setup
  * mkfs: factor printing of mkfs config
  * mkfs: Introduce mkfs configuration structure
  * mkfs: factor sector subopts parser
  * mkfs: factor rt subopts parser
  * mkfs: factor naming subopts parser
  * mkfs: factor meta subopts parser
  * mkfs: factor log subopts parser
  * mkfs: factor inode subopts parser
  * mkfs: factor data subopts parser
  * mkfs: factor block subopts parser
  * mkfs: add generic subopt parsing table
  * mkfs: introduce a structure to hold CLI options
  * mkfs: make subopt table const
  * mkfs: disallow specifying the sector size of internal log
  * xfs_db: add missing padding fields
  * xfs_db: print structure padding fields consistently
  * xfs_repair: remove old workqueue stuff in favor of libfrog code
  * libhandle: add missing destructor
  * libfrog: add missing function fs_table_destroy
  * libfrog: move paths.c out of libxcmd
  * libfrog: move conversion factors out of libxcmd
  * libfrog: move topology code out of libxcmd
  * libfrog: create a threaded workqueue
  * libfrog: promote avl64 code from xfs_repair
  * libfrog: move list_sort out of libxfs
  * libfrog: add bit manipulation functions
  * libfrog: move libxfs_log2_roundup to libfrog
  * libfrog: move all the userspace support stuff into a new library
  * man: describe the metadata scrubbing ioctl
  * xfs_io: provide an interface to the scrub ioctls
  * xfs_io: add buf_lru_ref tag to inject table
  * xfs_io: pull xfs errortag definitions from libxfs
  * xfs_io: implement ranged fiemap query
  * xfs_io: fix gcc-7 related printf warnings
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: abstract out dev_t conversions
  * xfs: fix memory leak in xfs_iext_free_last_leaf
  * xfs: fix type usage
  * xfs: remove u_int* type usage
  * xfs: handle zero entries case in xfs_iext_rebalance_leaf
  * xfs: add comments documenting the rebalance algorithm
  * xfs: trivial indentation fixup for xfs_iext_remove_node
  * xfs: remove a superflous assignment in xfs_iext_remove_node
  * xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node
  * xfs: fix number of records handling in xfs_iext_split_leaf
  * xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static
  * xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h
  * xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent
  * xfs: remove the nr_extents argument to xfs_iext_remove
  * xfs: remove the nr_extents argument to xfs_iext_insert
  * xfs: use a b+tree for the in-core extent list
  * xfs: allow unaligned extent records in xfs_bmbt_disk_set_all
  * xfs: remove support for inlining data/extents into the inode fork
  * xfs: simplify xfs_reflink_convert_cow
  * xfs: introduce the xfs_iext_cursor abstraction
  * xfs: iterate over extents in xfs_bmap_extents_to_btree
  * xfs: iterate over extents in xfs_iextents_copy
  * xfs: pass an on-disk extent to xfs_bmbt_validate_extent
  * xfs: treat idx as a cursor in xfs_bmap_collapse_extents
  * xfs: treat idx as a cursor in xfs_bmap_del_extent_*
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real
  * xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real
  * xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real
  * xfs: convert remaining xfs_sb_version_... checks to bool
  * xfs: move error injection tags into their own file
  * xfs: remove inode log format typedef
  * xfs: remove the inode log format from the inode log item
  * xfs: remove redundant assignment to variable bit
  * xfs: compare btree block keys to parent block's keys during scrub
  * xfs: abort dir/attr btree operation if btree is obviously weird
  * xfs: add a new xfs_iext_lookup_extent_before helper
  * xfs: merge xfs_bmap_read_extents into xfs_iread_extents
  * xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent
  * xfs: don't rely on extent indices in xfs_bmap_insert_extents
  * xfs: don't rely on extent indices in xfs_bmap_collapse_extents
  * xfs: update got in xfs_bmap_shift_update_extent
  * xfs: remove xfs_bmse_shift_one
  * xfs: split xfs_bmap_shift_extents
  * xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS
  * xfs: remove if_rdev
  * xfs: remove the never fully implemented UUID fork format
  * xfs: remove XFS_BMAP_TRACE_EXLIST
  * xfs: move pre/post-bmap tracing into xfs_iext_update_extent
  * xfs: remove post-bmap tracing in xfs_bmap_local_to_extents
  * xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real
  * xfs: add a xfs_bmap_fork_to_state helper
  * xfs: scrub quota information
  * xfs: scrub realtime bitmap/summary
  * xfs: scrub directory parent pointers
  * xfs: scrub symbolic links
  * xfs: scrub extended attributes
  * xfs: scrub directory metadata
  * xfs: scrub inode block mappings
  * xfs: scrub inodes
  * xfs: scrub refcount btrees
  * xfs: scrub rmap btrees
  * xfs: scrub inode btrees
  * xfs: scrub free space btrees
  * xfs: scrub the AGI
  * xfs: scrub AGF and AGFL
  * xfs: scrub the secondary superblocks
  * xfs: scrub the shape of a metadata btree
  * xfs: probe the scrub ioctl
  * xfs: create an ioctl to scrub AG metadata
  * xfs: create inode pointer verifiers
  * xfs: refactor btree block header checking functions
  * xfs: refactor btree pointer checks
  * xfs: create block pointer check functions
  * xfs: remove xfs_bmbt_get_state
  * xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all
  * xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update
  * xfs: refactor xfs_bmap_add_extent_unwritten_real
  * xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_hole_real
  * xfs: refactor xfs_bmap_add_extent_hole_delay
  * xfs: refactor xfs_del_extent_real
  * xfs: use the state defines in xfs_bmap_del_extent_real
  * xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay}
  * xfs: move some more code into xfs_bmap_del_extent_real
  * xfs: use xfs_bmap_del_extent_delay for the data fork as well
  * xfs: rename bno to end in __xfs_bunmapi
  * xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi
  * xfs: use xfs_iext_get_extent instead of open coding it
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real</changelog>
  <changelog author="olaf@aepfle.de" date="1523966400">- xfsprogs-devel needs uuid/uuid.h, Require pkgconfig(uuid) (bsc#1089947)</changelog>
  <changelog author="jeffm@suse.com" date="1534852800">- mkfs: avoid divide-by-zero when hardware reports optimal i/o size as 0
  (bsc#1089777)
  - xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch</changelog>
  <changelog author="jeffm@suse.com" date="1534852801">- repair: shift inode back into place if corrupted by bad log
  replay (bsc#1105396).
  * Added 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch</changelog>
  <changelog author="jeffm@suse.com" date="1540209600">- Explictly disable systemd unit files for scrub (bsc#1105068).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1545220800">- xfs_repair: Fix root inode's parent when it's bogus for sf directory
  (bsc#1119063)
  * Add xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576000">- xfs_repair: Add missing braces to allow zeroing of corrupt log
  (bsc#1073421)
  * Add xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576001">- xfs_repair: allow '/' in attribute names (bsc#1122271)
  * Add xfsprogs-xfs_repair-allow-in-attribute-names.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1558353600">- xfs_info: enable offline (unmounted) filesystem geometry queries (bsc#1129859)
  * Add xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  * Add xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  * Add xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  * Add xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  * Add xfsprogs-xfs_db-add-a-superblock-info-command.patch
  * Add xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  * Add xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  * Add xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  * Add xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch</changelog>
</package>
<package pkgid="2ebd7114e555c44d02f37e2887baaa196dab3859bef71aa4349bd10fcbb27a95" name="xfsprogs-devel" arch="i586">
  <version epoch="0" ver="4.15.0" rel="lp151.7.3.1"/>
  <changelog author="jack@suse.cz" date="1448539200">- Update to 4.3.0
  * xfs_fsr: improved temp file attr fork handling
  * libxfs: output verifier names in warnings
  * xfs_repair: enable verifier corruption warnings on very verbose
    output settings
  * xfs_fsr: abstract mntinfo/mntent differences
  * xfs_io: reflink and dedupe operation support
  * libxcmd: factoring of runtime reporting
  * man page fixes
  * xfs_db: blockget/blocktrash support for v5 filesystems
  * xfs_repair: many directory/attr cleanups and fixes
  * Log zeroing rework for v5 filesystems to prevent log sequence
    numbers from going backwards
- xfsprogs-ppc64.diff: Removed since we use asm/types.h for definitions now</changelog>
  <changelog author="mpluskal@suse.com" date="1451390400">- Trigger regeneration of initrd n recent releases (bsc#960273)
- Remove conditions for unsupported releases
- Make building more verbose</changelog>
  <changelog author="mlin@suse.com" date="1459166400">- Update to 4.5.0
  * xfs_io: prevent divide-by-zero on random IO
  * xfs_db: dquot command documentation fixes
  * xfs_quota: better command line parsing and documentation
  * libxfs: update to match kernel 4.5-rc1 code base
  * xfs_io: add DAX inode flag support
  * repair: scalability improvements on large corrupt filesystems
  * repair: directory rebuild fixes
  * mdrestore: progress accounting now works
  * metadump: fix btree block unused region zeroing
  * quota: timer command fixes
  * mkfs: man page cleanups
  * xfs_io: reflink, dedupe and other fixes
  * quota: Q_XGETNEXTQUOTA support
  * build cleanups for alternate C librarys
  * db: check fixes for sparse inodes
  * various: Fixes for Coverity reports
  * xfs_io: Document zero and help commands
  * mkfs: DIO can use logical sector size limits
  * repair: don't reset log cycle numbers when zeroing
  * db: add ability to format log to a specific cycle</changelog>
  <changelog author="jeffm@suse.com" date="1494936000">- Advise user of fs recovery options when we fail to mount (fate#320443)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1494936001">- Update to 4.9.0
  * xfs_quota: handle wrapped id from GETNEXTQUOTA
  * xfs_repair: don't indicate dirtiness if FSGEOMETRY fails
  * xfs_repair: junk leaf attribute if count == 0
  * xfs_repair: fix some potential null pointer deferences
  * xfs_repair: fix bogus rmapbt record owner check
  * xfs.h: require transparent LFS for all users
  * xfs_io: Fix initial -m option
  * xfs_io: add command line option -i to start an idle thread
  * xfsprogs: Update FSF address in COPYING file
  * mkfs.xfs: format reflink enabled filesystems
  * xfs_repair: use thread pools to sort rmap data
  * xfs_repair: check for mergeable refcount records
  * xfs_repair: use range query when while checking rmaps
  * xfs_repair: check the CoW extent size hint
  * xfs_repair: complain about copy-on-write leftovers
  * xfs_repair: rebuild the refcount btree
  * xfs_repair: check the refcount btree against our observed reference counts when -n
  * xfs_repair: fix inode reflink flags
  * xfs_repair: record reflink inode state
  * xfs_repair: process reverse-mapping data into refcount data
  * xfs_repair: handle multiple owners of data blocks
  * xfs_repair: check the existing refcount btree
  * xfs_repair: fix get_agino_buf to avoid corrupting inodes
  * xfs_logprint: support bmap redo items
  * xfs_logprint: support refcount redo items
  * xfs_logprint: support cowextsize reporting in log contents
  * xfs_io: try to unshare copy-on-write blocks via fallocate
  * xfs_io: provide long-format help for falloc
  * xfs_io: support injecting the 'per-AG reservation critically low' error
  * xfs_io: add refcount+bmap error injection types
  * xfs_io: get and set the CoW extent size hint
  * libxfs: add autoconf mechanism to override system header fsxattr
  * xfs_io: bmap should support querying CoW fork, shared blocks
  * xfs_growfs: report the presence of the reflink feature
  * xfs_db: print one array element per line
  * xfs_db: deal with the CoW extent size hint
  * xfs_db: metadump should copy the refcount btree too
  * xfs_db: add support for checking the refcount btree
  * xfs_db: dump refcount btree data
  * libxfs: add fsxattr flags and fields for cowextsize
  * libxfs: free the CoW fork from an inode
  * libxfs: plumb in bmap deferred op log items
  * libxfs: plumb in refcount deferred op log items
  * libxfs: add xfs_refcount.h to the standard include list
  * libxfs: initialize the in-core mount context for refcount btrees
  * xfs_buflock: handling parsing errors more gracefully
  * xfs_logprint: fix up the RUI printing code to reflect new format
  * xfs: defer should abort intent items if the trans roll fails
  * xfs: add xfs_trim_extent
  * libxfs: clean up _calc_dquots_per_chunk
  * xfs: rework refcount cow recovery error handling
  * xfs: implement swapext for rmap filesystems
  * xfs: recognize the reflink feature bit
  * xfs: simulate per-AG reservations being critically low
  * xfs: don't mix reflink and DAX mode for now
  * xfs: check for invalid inode reflink flags
  * xfs: convert unwritten status of reverse mappings for shared files
  * xfs: use interval query for rmap alloc operations on shared files
  * xfs: add shared rmap map/unmap/convert log item types
  * xfs: increase log reservations for reflink
  * xfs: try other AGs to allocate a BMBT block
  * xfs: preallocate blocks for worst-case btree expansion
  * xfs: create a separate cow extent size hint for the allocator
  * xfs: teach get_bmapx about shared extents and the CoW fork
  * xfs: store in-progress CoW allocations in the refcount btree
  * xfs: support removing extents from CoW fork
  * xfs: support allocating delayed extents in CoW fork
  * xfs: support bmapping delalloc extents in the CoW fork
  * xfs: introduce the CoW fork
  * xfs: don't allow reflinked dir/dev/fifo/socket/pipe files
  * xfs: add reflink feature flag to geometry
  * xfs: return work remaining at the end of a bunmapi operation
  * xfs: implement deferred bmbt map/unmap operations
  * xfs: pass bmapi flags through to bmap_del_extent
  * xfs: map an inode's offset to an exact physical block
  * xfs: log bmap intent items
  * xfs: create bmbt update intent log items
  * xfs: introduce reflink utility functions
  * xfs: reserve AG space for the refcount btree root
  * xfs: adjust refcount when unmapping file blocks
  * xfs: connect refcount adjust functions to upper layers
  * xfs: adjust refcount of an extent of blocks in refcount btree
  * xfs: log refcount intent items
  * xfs: create refcount update intent log items
  * xfs: add refcount btree operations
  * xfs: account for the refcount btree in the alloc/free log reservation
  * xfs: define the on-disk refcount btree format
  * xfs: refcount btree add more reserved blocks
  * xfs: introduce refcount btree definitions
  * xfs: remote attribute blocks aren't really userdata
  * xfs: set up per-AG free space reservations
  * xfs: defer should allow -&gt;finish_item to request a new transaction
  * xfs: count the blocks in a btree
  * xfs: create a standard btree size calculator code
  * xfs: convert RUI log formats to use variable length arrays
  * xfs: track log done items directly in the deferred pending work item
  * xfs: fix superblock inprogress check
- Update to 4.8.0
  * Add support for reflinks
  * xfs_io: fix inode command with "-n" for bogus inode
  * xfs_io: fix inode command help and argsmax
  * xfs_repair: add freesp btree block overflow to the free space
  * xfs_repair: fix bogosity when rmapping new AGFL blocks
  * libxcmd: fix counting of xfs entries in fs_table_insert
  * xfs_copy: Fix meta UUID handling on multiple copies
  * xfs_repair: fix segfault from uninitialized tp in mv_orphanage
  * xfs_io: allow chattr &amp; chproj on foreign filesystems
  * xfs_quota: fix free command for foreign fs
  * xfs_quota: un-flag non-foreign-capable commands
  * xfs_quota: Enable 3 more foreign commands
  * xfs_quota: add case for foreign fs, disabled regardless of foreign_allowed
  * xfs_quota: print and path output formatting: maintain reverse compatibility
  * libxcmd: populate fs table with xfs entries first, foreign entries last
  * xfs_repair: exit with status 2 if log dirtiness is unknown
  * xfs_db: pass the inode cluster offset when copying inodes
  * xfs_repair: don't crash on ENOSPC rebuilding a btree
  * libxfs/linux.c: Replace use of ustat by stat
  * db: write via array indexing doesn't work
  * xfs_db: properly set dquot_buf when operating on dquot
  * xfs_quota: fix missing break after foreign_allowed option
  * xfs_db: add crc manipulation commands
  * xfs_quota: certain commands must always be available
  * xfs_quota: add capabilities for use on non-XFS filesystems
  * xfs_quota: wire up XFS_GETQSTATV
  * xfs_metadump: don't warn about unobfuscated log with -o
  * xfs_repair: fix naming problems in repair/rmap.c
  * misc: fix libxfs api violations
  * misc: fix Coverity errors
  * libxcmd: fix mount option parsing to find rt/log devices
  * xfs: simple btree query range should look right if LE lookup fails
  * xfs: fix some key handling problems in _btree_simple_query_range
  * xfs: don't perform lookups on zero-height btrees
  * mkfs.xfs: create filesystems with reverse-mappings
  * mkfs: set agsize prior to calculating minimum log size
  * xfs_repair: check for impossible rmap record field combinations
  * xfs_repair: look for mergeable rmaps
  * xfs_repair: merge data &amp; attr fork reverse mappings
  * xfs_repair: add per-AG btree blocks to rmap data and add to rmapbt
  * xfs_repair: rebuild reverse-mapping btree
  * xfs_repair: check existing rmapbt entries against observed rmaps
  * xfs_repair: add fixed-location per-AG rmaps
  * xfs_repair: add inode bmbt block rmaps
  * xfs_repair: record and merge raw rmap data
  * xfs_repair: collect reverse-mapping data for refcount/rmap tree rebuilding
  * xfs_repair: create a slab API for allocating arrays in large chunks
  * xfs_repair: fix fino_bno calculation when rmapbt is enabled
  * xfs_repair: use rmap btree data to check block types
  * xfs_logprint: support rmap redo items
  * xfs_io: add rmap-finish error injection type
  * xfs_growfs: report rmapbt presence
  * xfs_db: introduce the 'fsmap' command to find what owns a set of fsblocks
  * xfs_db: copy the rmap btree
  * xfs_db: spot check rmapbt
  * xfs_db: display rmap btree contents
  * libxfs: add deferred ops item handlers for userspace
  * libxfs: fix various oddities in the kernel import
  * xfs: store rmapbt block count in the AGF
  * xfs_io: add free-extent error injection type
  * xfs_logprint: fix formatting issues with the EFI printing code
  * xfs_repair: preserve in-core meta_uuid while zeroing unused sb portions
  * xfs_io: bmap should print 'delalloc', not '-2'
  * xfs_buflock: add a tool that can be used to find buffer deadlocks
  * libxfs: fix xfs_isset pointer calculation
  * xfs: increase XFS_BTREE_MAXLEVELS to fit the rmapbt
  * xfs: change xfs_bmap_{finish,cancel,init,free} -&gt; xfs_defer_*
  * xfs: rework xfs_bmap_free callers to use xfs_defer_ops
  * xfs: enable the xfs_defer mechanism to process extents to free
  * xfs: introduce interval queries on btrees
  * xfs: support btrees with overlapping intervals for keys
  * xfs: add function pointers for get/update keys to the btree
  * xfs: during btree split, save new block key &amp; ptr for future insertion
  * xfs: set *stat=1 after iroot realloc
  * xfs: fix locking of the rt bitmap/summary inodes
  * xfs: fix attr shortform structure alignment on cris
- Update to 4.7.0
  * xfs_quota: fall back silently if XFS_GETNEXTQUOTA fails
  * xfs_io: implement 'copy_range' command
  * xfs_repair: low memory shouldn't indicate corruption on exit
  * xfs_repair: don't call xfs_sb_quota_from_disk twice
  * xfs_repair: resolve Coverity OVERFLOW_BEFORE_WIDEN
  * libxfs: fix double free in libxfs_alloc_file_space
  * libxfs: fix use after from in xfs_trans_roll
  * xfs: always set rvalp in xfs_dir2_node_trim_free
  * xfs: borrow indirect blocks from freed extent when available
  * xfs: update freeblocks counter after extent deletion
  * xfs: fix computation of inode btree maxlevels
  * xfs_check: process sparse inode chunks correctly
  * xfs_db: Revert "xfs_db: make check work for sparse inodes"
  * xfs_repair: set rsumino version to 2
  * mkfs: better error with incorrect b/s value suffix usage
  * mkfs: fix -l su minval
  * xfs.h: define XFS_IOC_FREEZE even if FIFREEZE is defined
  * xfs_quota: only round up timer reporting &gt; 1 day
  * xfs_quota: check report_mount return value
  * xfs_repair: new secondary superblock search method
  * libxcmd: generalize topology functions
  * xfs_db: defang frag command
  * db: limit AGFL bno array printing
  * xfs_db: allow recalculating CRCs on invalid metadata
  * xfs_db: fix unaligned accesses
  * metadump: limit permissible sector sizes
  * mkfs: conflicting values with disabled crc should fail
  * mkfs: add optional 'reason' for illegal_option
  * mkfs: unit conversions are case insensitive
  * mkfs: don't treat files as though they are block devices
  * mkfs: add string options to generic parsing
  * mkfs: encode conflicts into parsing table
  * mkfs: merge getnum
  * mkfs: table based parsing for converted parameters
  * mkfs: add respecification detection to generic parsing
  * mkfs: use getnum_checked for all ranged parameters
  * mkfs: getbool is redundant
  * mkfs: structify input parameter passing
  * mkfs: validate logarithmic parameters sanely
  * mkfs: validate all input values
  * mkfs: Sanitise the superblock feature macros
  * mkfs: sanitise ftype parameter values.
  * xfsprogs: use common code for multi-disk detection
  * xfs_repair: fix agf limit error messages
  * xfs_quota: print quota id number if the name can't be found
  * xfs_quota: fully support users and groups beginning with digits
  * xfs_io: allow mmap command to reserve some free space
  * xfs_io: modify argument errors of mremap command
  * Merge branch 'progs-misc-fixes-for-4.6' into for-master
  * Merge branch 'libxfs-4.6-sync' into for-master
  * xfs_io: implement 'inode' command
  * mkfs: fix crash when initializing rbmip
  * libxfs: fix up mismerge in libxfs_iflush_int
  * xfs: RT bitmap and summary buffers need verifiers
  * xfs: RT bitmap and summary buffers are not typed
  * xfs: handle errors from -&gt;free_blocks in xfs_btree_kill_iroot
  * xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk</changelog>
  <changelog author="jeffm@suse.com" date="1496404800">- fsr: fix uninitialized fs usage after timeout (bsc#1002699).
  * Added fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Fix crash in xfs_repair when threads fail to start (bsc#1019938).
  * Added xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Added xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Added xfs_repair-fix-thread-creation-failure-recovery.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jeffm@suse.com" date="1510920000">- Update to 4.13.1
  * mkfs: don't overflow the subopts array
- Update to 4.13.0
  * xfs_repair: handle missing extent states
  * mkfs: pass a custom cowextsize into the created filesystem
  * xfs_db: version command misses RMAPBT feature string
  * xfs_repair: don't use do_warn for normal log message
  * libxfs: remove getcwd/chdir dance from initialization
  * xfs_repair: take the ag_lock before recording rmap for a bmbt record
  * mkfs.xfs: Don't stagger AG for a single disk
  * xfs: fix inobt inode allocation search optimization
  * xfs_io: clarify the fsmap documentation
  * fiemap: Fix semantics of max_extents (-n arguments)
  * xfs_repair: fix thread creation failure recovery
  * xfs_repair: add prefetch trace calls to debug thread creation failures
  * xfs_repair: clear pthread_t when pthread_create fails
  * xfs_io: add seek consistency checks
  * fsr: fix uninitialized fs usage after timeout
  * xfs_db: bit fuzzing should read the right bit when flipping
  * xfs_db: make write/fuzz -c and -d work on non-crc filesystems
  * xfs_db: free field list when failing out of fuzz
  * xfs_db: reset metadump output flag
  * xfs_db: btdump should avoid eval for push and pop of cursor
  * xfs_db: use TYP_F_CRC_FUNC for inodes &amp; dquots
  * xfs_db: introduce fuzz command
  * xfs_db: write values into dir/attr blocks and recalculate CRCs
  * xfs_db: print attribute remote value blocks
  * xfs_db: dump dir/attr btrees
  * xfs_db: fix metadump redirection (again)
  * xfs_repair: fix symlink target length checks by changing MAXPATHLEN to XFS_SYMLINK_MAXLEN
  * xfs_metadump: properly handle obfuscation of all remote attribute blocks
  * xfs_io: allow lsattr &amp; lsproj on foreign filesystems
  * libxfs: init -&gt;b_maps on contig buffers for uncached compatibility
  * xfs_db: associate proper type with free inode btree root
  * xfs_io: Print filesystem statfs flags in 'statfs' command
  * xfs: fix multi-AG deadlock in xfs_bunmapi
  * xfs: check that dir block entries don't off the end of the buffer
  * xfs: check _alloc_read_agf buffer pointer before using
  * xfs: set firstfsb to NULLFSBLOCK before feeding it to _bmapi_write
  * xfs: check _btree_check_block value
  * xfs: don't crash on unexpected holes in dir/attr btrees
  * xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub
  * xfs: try to avoid blowing out the transaction reservation when bunmaping a shared extent
- Update to 4.12.0
  * libxfs: propagate transaction block reservations
  * xfs_db: properly set inode type
  * xfs_db: redirect printfs when metadumping to stdout
  * mkfs.xfs: allow specification of 0 data stripe width &amp; unit
  * mkfs: set inode alignment and cluster size for minimum log size estimation
  * mkfs: set agblklog when we're verifying minimum log size
  * libxfs: fix fsmap.h inclusion
  * xfs_db: identify attr dabtree field types correctly
  * xfs_spaceman: fix potential overflowing expression in trim_f()
  * xfs_spaceman: close open file for error case in openfile()
  * xfs_spaceman: fix potential memory leak by malloc in scan_ag
  * xfs_db: improve argument naming in set_cur and set_iocur_type
  * xfs_db: update buffer size when new type is set
  * xfs_spaceman: add group summary mode
  * xfs_spaceman: add a man page
  * xfs_spaceman: Free space mapping command
  * xfs_spaceman: add new speculative prealloc control
  * xfs_spaceman: add FITRIM support
  * xfs_spaceman: space management tool
  * xfs_repair: replace rmap_compare with libxfs version
  * xfs_io: support the new getfsmap ioctl
  * xfs: introduce the XFS_IOC_GETFSMAP ioctl
  * libxfs: use crc32c slice-by-8 variant by default
  * libxcmd: add cvt{int, long} to convert strings to int and long
  * metadump: warn about corruption if log is dirty
  * xfs_metadump: tag metadump image with informational flags
  * xfs_repair: handle reading superblock from image on larger sector size filesystem
  * xfs_db: add alignment filter to freesp command
  * xfs_growfs: ensure target path is an active xfs mountpoint
  * libxfs: fix xfs_trans_alloc_empty namespace
  * xfs: fix unaligned access in xfs_btree_visit_blocks
  * xfs: avoid mount-time deadlock in CoW extent recovery
  * xfs: fix indlen accounting error on partial delalloc conversion
  * xfs: abstract PF_FSTRANS to PF_MEMALLOC_NOFS
  * xfs: reserve enough blocks to handle btree splits when remapping
  * xfs: simplify validation of the unwritten extent bit
  * xfs: introduce xfs_bmapi_remap
  * xfs: pass individual arguments to xfs_bmap_add_extent_hole_real
  * xfs: fix integer truncation in xfs_bmap_remap_alloc
  * xfs: simplify xfs_calc_dquots_per_chunk
  * xfs: implement the GETFSMAP ioctl
  * xfs: add a couple of queries to iterate free extents in the rtbitmap
  * xfs: create a function to query all records in a btree
  * xfs: provide a query_range function for freespace btrees
  * xfs: plumb in needed functions for range querying of the freespace btrees
  * xfs: fix up inode validation failure message
- Update to 4.11.0
  * xfs_io: add missed quotation marks in man page
  * xfs_io: add missed inode command into man page
  * xfs_io: fix statx call for changed UAPI
  * xfs_db: dump metadata btrees via 'btdump'
  * xfs_db: use iocursor type to guess btree geometry if bad magic
  * xfs_db: don't print arrays off the end of a buffer
  * mkfs.xfs: Assign proper defaults to rmapbt and reflink flags
  * xfs_io: Add statx support for PowerPC architecture
  * xfs_io: fix statx definition for non-x86 architecture
  * xfs_db: allow write -d to dqblks
  * xfs_db: allow write -d to inodes
  * xfs_io: hook up statx
  * xfsprogs: fix build dep on configure.ac
  * xfs_repair: pass btnum not magic to phase5 functions
  * xfs_io: Fix "falloc -p" to pass KEEP_SIZE
  * xfs_repair: warn about dirty log with -n option
  * xfs_repair: detect invalid zero-sized symlink inodes
  * xfs_io: support shutdown command on foreign fses
  * libxfs: fix xfs_extent_busy_flush macro definition
  * xfs: verify inline directory data forks
  * xfs: try any AG when allocating the first btree block when reflinking
  * xfs: use iomap new flag for newly allocated delalloc blocks
  * xfs: tune down agno asserts in the bmap code
  * xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
  * xfs: split indlen reservations fairly when under reserved
  * xfs: handle indlen shortage on delalloc extent merge
  * xfs: improve handling of busy extents in the low-level allocator
  * xfs: go straight to real allocations for direct I/O COW writes
  * xfs: allow unwritten extents in the CoW fork
  * xfs: verify free block header fields
  * xfs: check for obviously bad level values in the bmbt root
  * xfs: filter out obviously bad btree pointers
  * xfs: fail _dir_open when readahead fails
  * xfs: fix toctou race when locking an inode to access the data map
  * xfs: glean crc status from mp not flags in xfs_btree_init_block_int
- Update to 4.10.0
  * xfs_metadump: ignore attr leaf with 0 entries
  * libxfs: sync up FSGETXATTR names and definitions with the kernel
  * xfsprogs: Fix building xfsprogs on 32-bit platforms (again)
  * xfs: extsize hints are not unlikely in xfs_bmap_btalloc
  * xfs: use per-AG reservations for the finobt
  * xfs: only update mount/resv fields on success in __xfs_ag_resv_init
  * xfs: verify dirblocklog correctly
  * xfs: fix COW writeback race
  * xfs: fix xfs_mode_to_ftype() prototype
  * xfs_db: Interpret inode's di_format field as unsigned
  * xfs_repair: trash dirattr btrees that cycle to the root
  * xfs_repair: strengthen geometry checks
  * xfs_db: fix the 'source' command when passed as a -c option
  * libxfs: sanitize agcount on load
  * xfs_io: add DAX and CoW extent-size flags to chattr manpage
  * xfs_io: fix missing syncfs command
  * xfs_logprint: handle log operation split of inode item correctly
  * xfs: sanity check inode di_mode
  * xfs: sanity check directory inode di_size
  * xfs_repair: update the manual content about xfs_repair exit status
  * xfs_repair.8: document dirty log conditions
  * xfs_io: implement 'utimes' command
  * libxcmd: add non-iterating user commands
  * xfs_io: make various commands one-shot only
  * libxcmd: don't check generic library commands
  * libxcmd: merge command() and iterate_command()
  * libxcmd: rename args_command to command_iterator
  * libxcmd: check CMD_FLAG_GLOBAL inside args_command()
  * xfs_io: fix some documentation problems
  * xfs_io: fix the minimum arguments to the reflink command
  * xfs_io: prefix dedupe command error messages consistently
  * xfs_io: Improvements to copy_range return code handling
  * xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
  * xfs_logprint: di_gen is unsigned
  * xfs_io: fix building with musl
  * xfs: don't rely on -&gt;total in xfs_alloc_space_available
  * xfs: adjust allocation length in xfs_alloc_space_available
  * xfs: fix bogus minleft manipulations
  * xfs: bump up reserved blocks in xfs_alloc_set_aside
  * xfs: use the actual AG length when reserving blocks
  * xfs: use GPF_NOFS when allocating btree cursors
  * xfs: ignore leaf attr ichdr.count in verifier during log replay
  * xfs: optimise CRC updates
  * xfs: make xfs btree stats less huge
  * xfs: don't allow di_size with high bit set
  * xfs: error out if trying to add attrs and anextents &gt; 0
  * xfs: don't crash if reading a directory results in an unexpected hole
  * xfs: complain if we don't get nextents bmap records
  * xfs: check for bogus values in btree block headers
  * xfs: forbid AG btrees with level == 0
  * xfs: several xattr functions can be void
  * xfs: handle cow fork in xfs_bmap_trace_exlist
  * xfs: pass state not whichfork to trace_xfs_extlist
  * xfs: Move AGI buffer type setting to xfs_read_agi
  * xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
  * fs: xfs: libxfs: constify xfs_nameops structures
  * repair: use new extent lookup helpers in bmap_next_offset
  * xfs: use new extent lookup helpers in __xfs_bunmapi
  * xfs: use new extent lookup helpers in xfs_bmapi_write
  * xfs: use new extent lookup helpers in xfs_bmapi_read
  * xfs: new inode extent list lookup helpers
  * xfs: check minimum block size for CRC filesystems
  * xfs: provide helper for counting extents from if_bytes
  * xfs: check return value of _trans_reserve_quota_nblks
  * xfs: set XFS_DA_OP_OKNOENT in xfs_attr_get
- Removed now-obsolete patches:
  * Removed xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Removed xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Removed xfs_repair-fix-thread-creation-failure-recovery.patch
  * Removed fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1510920001">- Fix building on SLE11
- Added xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Added xfs_io-stat-treat-statfs.f_flags-as-optional.patch</changelog>
  <changelog author="lurodriguez@suse.com" date="1513684800">- Deletes already merged xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Deletes already merged xfs_io-stat-treat-statfs.f_flags-as-optional.patch
- Refreshes patch xfsprogs-docdir.diff
- Update to v4.14.0:
  * xfs_io: stat: treat statfs.f_flags as optional
  * xfs_io: stat: fix typo in statfs-&gt;f_flags
  * xfsprogs: fix wrong variable types in pwrite/pread code
  * xfs_io: Allow partial writes
  * xfs_io: Add RWF_NOWAIT to pwritev2()
  * xfs_io: Add support for pwritev2()
  * xfs_io: Disable -V if pwritev is not available
  * xfs_repair: always release btree buffers when refcountbt checks fail
  * misc: fix ubsan warnings
  * misc: enable thread sanitizer if the builder wants it
  * misc: enable gcc/clang address sanitizer if the builder wants it
  * misc: enable ubsan if the builder wants it
  * xfs_repair: fix cowextsize field checking and repairing
  * xfs_repair: clear DAX flag from non-file inodes
  * xfs_repair: fix bag memory overwrite problems
  * xfs_io: add new error injection knobs to inject command
  * xfsprogs: explicitly cast troublesome types to match printf  format specifiers
  * db: increase metadump's default overly long extent discard  threshold
  * build: define _DEFAULT_SOURCE with _BSD_SOURCE for preadv
  * xfsprogs: add xfs_spaceman to .gitignore
  * xfs_io: report io error for pwrite -W and -w
  * xfs_metadump: zap stale data in DIR2_LEAF1 dirs
  * metadump: update manpage for dirty log/obfuscation issue
  * kill off u_int*_t types
  * xfs: trim writepage mapping to within eof
  * xfs: handle error if xfs_btree_get_bufs fails
  * xfs: Fix bool initialization/comparison
  * xfs: Don't log uninitialised fields in inode structures
  * xfs: revert "xfs: factor rmap btree size into the indlen calculations"
  * xfs: perag initialization should only touch m_ag_max_usable for AG 0
  * xfs: fix compiler warnings
  * xfs: simplify the rmap code in xfs_bmse_merge
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents
  * xfs: move some code around inside xfs_bmap_shift_extents
  * xfs: use xfs_iext_get_extent in xfs_bmap_first_unused
  * xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert
  * xfs: add a xfs_iext_update_extent helper
  * xfs: relog dirty buffers during swapext bmbt owner change
  * xfs: skip bmbt block ino validation during owner change
  * xfs: don't log dirty ranges for ordered buffers
  * xfs: remove the ip argument to xfs_defer_finish
  * xfs: rename xfs_defer_join to xfs_defer_ijoin
  * xfs: refactor xfs_trans_roll
  * xfs: stop searching for free slots in an inode chunk when there are none</changelog>
  <changelog author="lurodriguez@suse.com" date="1519819200">- adds make_xfs_scrub_interp_explicit.patch, rpm lint complains about
  using env python, when this is used the dependency checker for rpm
  will not be able to resolve dependencies correctly, so an explicit
  interpreter is needed.
- Update to v4.15.0 as it contains major code refactor on mkfs/xfs_mkfs.c
  which would help to eventually consider completing FATE#324503. Changes
  in this release:
  * Fix spelling mistake in mkfs lazy superblock diagnostic
  * Fix grammar and spelling in strings and man pages
  * Add xfs_scrub_fail systemd service file docs entry
  * Update .gitignore list for generated scrub cron file
  * Several updates to use more modern Debian packaging
  * xfsprogs: Release v4.15.0-rc1
  * xfs_scrub: refactor outcome display into a separate helper
  * xfs_scrub: always init phase information
  * xfs_scrub: reclassify some of the warning messages
  * xfs_scrub: reclassify runtime errors
  * xfs_scrub: classify lack of ioctl support as a runtime error
  * xfs_scrub: remove preen mode
  * xfs_mdrestore: Don't rewind source file stream
  * xfs_mdrestore: Add -i option to built-in help
  * xfs_io: fix copy_file_range symbol name collision
  * xfs_scrub: kill dead code
  * xfs_scrub: close dir_fd if we don't get a DIR pointer
  * mkfs: don't create realtime filesystems with reflink enabled
  * xfs_scrub: handle scrub-only kernels more helpfully
  * xfs_scrub: wire up repair ioctl
  * debian/control: remove nonexistent libreadline5-dev build dependency
  * xfs_scrub: integrate services with systemd
  * xfs_scrub: create a script to scrub all xfs filesystems
  * xfs_scrub: progress indicator
  * xfs_scrub: fstrim the free areas if there are no errors on the filesystem
  * xfs_scrub: check summary counters
  * xfs_scrub: optionally use SCSI READ VERIFY commands to scrub data blocks on disk
  * xfs_scrub: scrub file data blocks
  * xfs_scrub: create infrastructure to read verify data blocks
  * xfs_scrub: create a bitmap data structure
  * xfs_scrub: warn about normalized Unicode name collisions
  * xfs_scrub: warn about suspicious characters in directory/xattr names
  * xfs_scrub: check directory connectivity
  * xfs_scrub: scan inodes
  * xfs_scrub: thread-safe stats counter
  * xfs_scrub: scan filesystem and AG metadata
  * xfs_scrub: wrap the scrub ioctl
  * xfs_scrub: filesystem counter collection functions
  * xfs_scrub: add file space map iteration functions
  * xfs_scrub: add space map iteration functions
  * xfs_scrub: add inode iteration functions
  * xfs_scrub: find XFS filesystem geometry
  * xfs_scrub: create an abstraction for a block device
  * xfs_scrub: figure out how many threads we're going to need
  * xfs_scrub: dispatch the various phases of the scrub program
  * xfs_scrub: set up command line argument parsing
  * xfs_scrub: common error handling
  * xfs_scrub: create online filesystem scrub program
  * mkfs: more sunit/swidth sanity checking
  * mkfs: always explain why numeric inputs are invalid
  * mkfs: don't call values 'illegal', they're invalid
  * mkfs: don't crash on dswidth overflow
  * misc: ubsan fixes
  * xfs_db: interpret inode timestamps as signed integers
  * xfsprogs: update dead urls
  * xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT
  * xfs_logprint: fix v3 inode formatting
  * libxfs: use a memory zone for log items
  * libxfs: use a memory zone for transactions
  * libxfs: remove unused buf_fsprivate3
  * xfs: add a proper transaction pointer to struct xfs_buf
  * xfs: remove wrappers around b_fspriv
  * find-api-violations: fix a broken grep pattern
  * xfs_repair: fix libxfs namespace problems
  * xfs_db: fix crash when field list selector string has trailing slash
  * xfs_db: check should deal with cow staging extents correctly
  * libhandle: zap fdhash in fshandle_destroy
  * xfs_io: add a new 'log_writes' command
  * xfs_io: add MAP_SYNC support to mmap()
  * mkfs: do not allow both "dev" and "name" subopts for log or realtime
  * mkfs: pass switch case value directly into getnum/getstr
  * mkfs: un-document removed logarithm based CLI options
  * mkfs: remove logarithm based CLI options
  * mkfs: resolve sector size CLI conflicts
  * mkfs: convert subopt name, val pairs to enums and declared arrays
  * mkfs: support arbitrary conflict specification
  * mkfs: protofile only needs to be set up once
  * mkfs: simplify minimum log size calculation
  * mkfs: use opts parameter during option parsing
  * mkfs: remove use-once default macros
  * mkfs: document sb_feat_args members
  * mkfs: invert project id width boolean name
  * mkfs: remove unused m_uuid in sb_feat_args
  * mkfs: Don't emit default config message yet
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: only skip rmap owner checks for unknown-owner rmap removal
  * xfs: always honor OWN_UNKNOWN rmap removal requests
  * xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order
  * xfs: move xfs_iext_insert tracepoint to report useful information
  * xfs: account for null transactions in bunmapi
  * xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute
  * xfs: add the ability to join a held buffer to a defer_ops
  * xfs: refactor buffer logging into buffer dirtying helper
  * xfs: remove "no-allocation" reservations for file creations
  * xfs: fix leaks on corruption errors in xfs_bmap.c
  * libxfs: libxfs_nproc should never return negative numbers
  * mkfs: tidy up definitions
  * mkfs: move error functions
  * mkfs: cleanup redundant temporary code
  * mkfs: factor log size calculations
  * mkfs: factor initial mount setup
  * mkfs: rework imaxpct calculation
  * mkfs: factor AG alignment
  * mkfs: factor AG geometry calculations
  * mkfs: factor rt device validation
  * mkfs: factor log device validation
  * mkfs: factor data device validation
  * mkfs: factor device opening
  * mkfs: rework stripe calculations
  * mkfs: factor rtdev extent size validation
  * mkfs: fix hidden parameter in DTOBT()
  * mkfs: factor out device size calculations
  * mkfs: factor inode size validation
  * mkfs: factor directory blocksize validation
  * mkfs: factor superblock feature validation
  * mkfs: factor log sector size validation
  * mkfs: factor blocksize validation
  * mkfs: factor sectorsize validation
  * mkfs: rename top level CLI parameters
  * mkfs: introduce default configuration structure
  * mkfs: factor secondary superblock updates
  * mkfs: factor writing AG headers
  * mkfs: factor out device preparation
  * mkfs: factor in memory superblock setup
  * mkfs: factor printing of mkfs config
  * mkfs: Introduce mkfs configuration structure
  * mkfs: factor sector subopts parser
  * mkfs: factor rt subopts parser
  * mkfs: factor naming subopts parser
  * mkfs: factor meta subopts parser
  * mkfs: factor log subopts parser
  * mkfs: factor inode subopts parser
  * mkfs: factor data subopts parser
  * mkfs: factor block subopts parser
  * mkfs: add generic subopt parsing table
  * mkfs: introduce a structure to hold CLI options
  * mkfs: make subopt table const
  * mkfs: disallow specifying the sector size of internal log
  * xfs_db: add missing padding fields
  * xfs_db: print structure padding fields consistently
  * xfs_repair: remove old workqueue stuff in favor of libfrog code
  * libhandle: add missing destructor
  * libfrog: add missing function fs_table_destroy
  * libfrog: move paths.c out of libxcmd
  * libfrog: move conversion factors out of libxcmd
  * libfrog: move topology code out of libxcmd
  * libfrog: create a threaded workqueue
  * libfrog: promote avl64 code from xfs_repair
  * libfrog: move list_sort out of libxfs
  * libfrog: add bit manipulation functions
  * libfrog: move libxfs_log2_roundup to libfrog
  * libfrog: move all the userspace support stuff into a new library
  * man: describe the metadata scrubbing ioctl
  * xfs_io: provide an interface to the scrub ioctls
  * xfs_io: add buf_lru_ref tag to inject table
  * xfs_io: pull xfs errortag definitions from libxfs
  * xfs_io: implement ranged fiemap query
  * xfs_io: fix gcc-7 related printf warnings
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: abstract out dev_t conversions
  * xfs: fix memory leak in xfs_iext_free_last_leaf
  * xfs: fix type usage
  * xfs: remove u_int* type usage
  * xfs: handle zero entries case in xfs_iext_rebalance_leaf
  * xfs: add comments documenting the rebalance algorithm
  * xfs: trivial indentation fixup for xfs_iext_remove_node
  * xfs: remove a superflous assignment in xfs_iext_remove_node
  * xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node
  * xfs: fix number of records handling in xfs_iext_split_leaf
  * xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static
  * xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h
  * xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent
  * xfs: remove the nr_extents argument to xfs_iext_remove
  * xfs: remove the nr_extents argument to xfs_iext_insert
  * xfs: use a b+tree for the in-core extent list
  * xfs: allow unaligned extent records in xfs_bmbt_disk_set_all
  * xfs: remove support for inlining data/extents into the inode fork
  * xfs: simplify xfs_reflink_convert_cow
  * xfs: introduce the xfs_iext_cursor abstraction
  * xfs: iterate over extents in xfs_bmap_extents_to_btree
  * xfs: iterate over extents in xfs_iextents_copy
  * xfs: pass an on-disk extent to xfs_bmbt_validate_extent
  * xfs: treat idx as a cursor in xfs_bmap_collapse_extents
  * xfs: treat idx as a cursor in xfs_bmap_del_extent_*
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real
  * xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real
  * xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real
  * xfs: convert remaining xfs_sb_version_... checks to bool
  * xfs: move error injection tags into their own file
  * xfs: remove inode log format typedef
  * xfs: remove the inode log format from the inode log item
  * xfs: remove redundant assignment to variable bit
  * xfs: compare btree block keys to parent block's keys during scrub
  * xfs: abort dir/attr btree operation if btree is obviously weird
  * xfs: add a new xfs_iext_lookup_extent_before helper
  * xfs: merge xfs_bmap_read_extents into xfs_iread_extents
  * xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent
  * xfs: don't rely on extent indices in xfs_bmap_insert_extents
  * xfs: don't rely on extent indices in xfs_bmap_collapse_extents
  * xfs: update got in xfs_bmap_shift_update_extent
  * xfs: remove xfs_bmse_shift_one
  * xfs: split xfs_bmap_shift_extents
  * xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS
  * xfs: remove if_rdev
  * xfs: remove the never fully implemented UUID fork format
  * xfs: remove XFS_BMAP_TRACE_EXLIST
  * xfs: move pre/post-bmap tracing into xfs_iext_update_extent
  * xfs: remove post-bmap tracing in xfs_bmap_local_to_extents
  * xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real
  * xfs: add a xfs_bmap_fork_to_state helper
  * xfs: scrub quota information
  * xfs: scrub realtime bitmap/summary
  * xfs: scrub directory parent pointers
  * xfs: scrub symbolic links
  * xfs: scrub extended attributes
  * xfs: scrub directory metadata
  * xfs: scrub inode block mappings
  * xfs: scrub inodes
  * xfs: scrub refcount btrees
  * xfs: scrub rmap btrees
  * xfs: scrub inode btrees
  * xfs: scrub free space btrees
  * xfs: scrub the AGI
  * xfs: scrub AGF and AGFL
  * xfs: scrub the secondary superblocks
  * xfs: scrub the shape of a metadata btree
  * xfs: probe the scrub ioctl
  * xfs: create an ioctl to scrub AG metadata
  * xfs: create inode pointer verifiers
  * xfs: refactor btree block header checking functions
  * xfs: refactor btree pointer checks
  * xfs: create block pointer check functions
  * xfs: remove xfs_bmbt_get_state
  * xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all
  * xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update
  * xfs: refactor xfs_bmap_add_extent_unwritten_real
  * xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_hole_real
  * xfs: refactor xfs_bmap_add_extent_hole_delay
  * xfs: refactor xfs_del_extent_real
  * xfs: use the state defines in xfs_bmap_del_extent_real
  * xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay}
  * xfs: move some more code into xfs_bmap_del_extent_real
  * xfs: use xfs_bmap_del_extent_delay for the data fork as well
  * xfs: rename bno to end in __xfs_bunmapi
  * xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi
  * xfs: use xfs_iext_get_extent instead of open coding it
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real</changelog>
  <changelog author="olaf@aepfle.de" date="1523966400">- xfsprogs-devel needs uuid/uuid.h, Require pkgconfig(uuid) (bsc#1089947)</changelog>
  <changelog author="jeffm@suse.com" date="1534852800">- mkfs: avoid divide-by-zero when hardware reports optimal i/o size as 0
  (bsc#1089777)
  - xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch</changelog>
  <changelog author="jeffm@suse.com" date="1534852801">- repair: shift inode back into place if corrupted by bad log
  replay (bsc#1105396).
  * Added 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch</changelog>
  <changelog author="jeffm@suse.com" date="1540209600">- Explictly disable systemd unit files for scrub (bsc#1105068).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1545220800">- xfs_repair: Fix root inode's parent when it's bogus for sf directory
  (bsc#1119063)
  * Add xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576000">- xfs_repair: Add missing braces to allow zeroing of corrupt log
  (bsc#1073421)
  * Add xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576001">- xfs_repair: allow '/' in attribute names (bsc#1122271)
  * Add xfsprogs-xfs_repair-allow-in-attribute-names.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1558353600">- xfs_info: enable offline (unmounted) filesystem geometry queries (bsc#1129859)
  * Add xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  * Add xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  * Add xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  * Add xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  * Add xfsprogs-xfs_db-add-a-superblock-info-command.patch
  * Add xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  * Add xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  * Add xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  * Add xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch</changelog>
</package>
<package pkgid="bbda1bfb318adee6e085235972132f28943d968db982668f416de8c15dfc25ac" name="xfsprogs-devel" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="lp151.7.3.1"/>
  <changelog author="jack@suse.cz" date="1448539200">- Update to 4.3.0
  * xfs_fsr: improved temp file attr fork handling
  * libxfs: output verifier names in warnings
  * xfs_repair: enable verifier corruption warnings on very verbose
    output settings
  * xfs_fsr: abstract mntinfo/mntent differences
  * xfs_io: reflink and dedupe operation support
  * libxcmd: factoring of runtime reporting
  * man page fixes
  * xfs_db: blockget/blocktrash support for v5 filesystems
  * xfs_repair: many directory/attr cleanups and fixes
  * Log zeroing rework for v5 filesystems to prevent log sequence
    numbers from going backwards
- xfsprogs-ppc64.diff: Removed since we use asm/types.h for definitions now</changelog>
  <changelog author="mpluskal@suse.com" date="1451390400">- Trigger regeneration of initrd n recent releases (bsc#960273)
- Remove conditions for unsupported releases
- Make building more verbose</changelog>
  <changelog author="mlin@suse.com" date="1459166400">- Update to 4.5.0
  * xfs_io: prevent divide-by-zero on random IO
  * xfs_db: dquot command documentation fixes
  * xfs_quota: better command line parsing and documentation
  * libxfs: update to match kernel 4.5-rc1 code base
  * xfs_io: add DAX inode flag support
  * repair: scalability improvements on large corrupt filesystems
  * repair: directory rebuild fixes
  * mdrestore: progress accounting now works
  * metadump: fix btree block unused region zeroing
  * quota: timer command fixes
  * mkfs: man page cleanups
  * xfs_io: reflink, dedupe and other fixes
  * quota: Q_XGETNEXTQUOTA support
  * build cleanups for alternate C librarys
  * db: check fixes for sparse inodes
  * various: Fixes for Coverity reports
  * xfs_io: Document zero and help commands
  * mkfs: DIO can use logical sector size limits
  * repair: don't reset log cycle numbers when zeroing
  * db: add ability to format log to a specific cycle</changelog>
  <changelog author="jeffm@suse.com" date="1494936000">- Advise user of fs recovery options when we fail to mount (fate#320443)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1494936001">- Update to 4.9.0
  * xfs_quota: handle wrapped id from GETNEXTQUOTA
  * xfs_repair: don't indicate dirtiness if FSGEOMETRY fails
  * xfs_repair: junk leaf attribute if count == 0
  * xfs_repair: fix some potential null pointer deferences
  * xfs_repair: fix bogus rmapbt record owner check
  * xfs.h: require transparent LFS for all users
  * xfs_io: Fix initial -m option
  * xfs_io: add command line option -i to start an idle thread
  * xfsprogs: Update FSF address in COPYING file
  * mkfs.xfs: format reflink enabled filesystems
  * xfs_repair: use thread pools to sort rmap data
  * xfs_repair: check for mergeable refcount records
  * xfs_repair: use range query when while checking rmaps
  * xfs_repair: check the CoW extent size hint
  * xfs_repair: complain about copy-on-write leftovers
  * xfs_repair: rebuild the refcount btree
  * xfs_repair: check the refcount btree against our observed reference counts when -n
  * xfs_repair: fix inode reflink flags
  * xfs_repair: record reflink inode state
  * xfs_repair: process reverse-mapping data into refcount data
  * xfs_repair: handle multiple owners of data blocks
  * xfs_repair: check the existing refcount btree
  * xfs_repair: fix get_agino_buf to avoid corrupting inodes
  * xfs_logprint: support bmap redo items
  * xfs_logprint: support refcount redo items
  * xfs_logprint: support cowextsize reporting in log contents
  * xfs_io: try to unshare copy-on-write blocks via fallocate
  * xfs_io: provide long-format help for falloc
  * xfs_io: support injecting the 'per-AG reservation critically low' error
  * xfs_io: add refcount+bmap error injection types
  * xfs_io: get and set the CoW extent size hint
  * libxfs: add autoconf mechanism to override system header fsxattr
  * xfs_io: bmap should support querying CoW fork, shared blocks
  * xfs_growfs: report the presence of the reflink feature
  * xfs_db: print one array element per line
  * xfs_db: deal with the CoW extent size hint
  * xfs_db: metadump should copy the refcount btree too
  * xfs_db: add support for checking the refcount btree
  * xfs_db: dump refcount btree data
  * libxfs: add fsxattr flags and fields for cowextsize
  * libxfs: free the CoW fork from an inode
  * libxfs: plumb in bmap deferred op log items
  * libxfs: plumb in refcount deferred op log items
  * libxfs: add xfs_refcount.h to the standard include list
  * libxfs: initialize the in-core mount context for refcount btrees
  * xfs_buflock: handling parsing errors more gracefully
  * xfs_logprint: fix up the RUI printing code to reflect new format
  * xfs: defer should abort intent items if the trans roll fails
  * xfs: add xfs_trim_extent
  * libxfs: clean up _calc_dquots_per_chunk
  * xfs: rework refcount cow recovery error handling
  * xfs: implement swapext for rmap filesystems
  * xfs: recognize the reflink feature bit
  * xfs: simulate per-AG reservations being critically low
  * xfs: don't mix reflink and DAX mode for now
  * xfs: check for invalid inode reflink flags
  * xfs: convert unwritten status of reverse mappings for shared files
  * xfs: use interval query for rmap alloc operations on shared files
  * xfs: add shared rmap map/unmap/convert log item types
  * xfs: increase log reservations for reflink
  * xfs: try other AGs to allocate a BMBT block
  * xfs: preallocate blocks for worst-case btree expansion
  * xfs: create a separate cow extent size hint for the allocator
  * xfs: teach get_bmapx about shared extents and the CoW fork
  * xfs: store in-progress CoW allocations in the refcount btree
  * xfs: support removing extents from CoW fork
  * xfs: support allocating delayed extents in CoW fork
  * xfs: support bmapping delalloc extents in the CoW fork
  * xfs: introduce the CoW fork
  * xfs: don't allow reflinked dir/dev/fifo/socket/pipe files
  * xfs: add reflink feature flag to geometry
  * xfs: return work remaining at the end of a bunmapi operation
  * xfs: implement deferred bmbt map/unmap operations
  * xfs: pass bmapi flags through to bmap_del_extent
  * xfs: map an inode's offset to an exact physical block
  * xfs: log bmap intent items
  * xfs: create bmbt update intent log items
  * xfs: introduce reflink utility functions
  * xfs: reserve AG space for the refcount btree root
  * xfs: adjust refcount when unmapping file blocks
  * xfs: connect refcount adjust functions to upper layers
  * xfs: adjust refcount of an extent of blocks in refcount btree
  * xfs: log refcount intent items
  * xfs: create refcount update intent log items
  * xfs: add refcount btree operations
  * xfs: account for the refcount btree in the alloc/free log reservation
  * xfs: define the on-disk refcount btree format
  * xfs: refcount btree add more reserved blocks
  * xfs: introduce refcount btree definitions
  * xfs: remote attribute blocks aren't really userdata
  * xfs: set up per-AG free space reservations
  * xfs: defer should allow -&gt;finish_item to request a new transaction
  * xfs: count the blocks in a btree
  * xfs: create a standard btree size calculator code
  * xfs: convert RUI log formats to use variable length arrays
  * xfs: track log done items directly in the deferred pending work item
  * xfs: fix superblock inprogress check
- Update to 4.8.0
  * Add support for reflinks
  * xfs_io: fix inode command with "-n" for bogus inode
  * xfs_io: fix inode command help and argsmax
  * xfs_repair: add freesp btree block overflow to the free space
  * xfs_repair: fix bogosity when rmapping new AGFL blocks
  * libxcmd: fix counting of xfs entries in fs_table_insert
  * xfs_copy: Fix meta UUID handling on multiple copies
  * xfs_repair: fix segfault from uninitialized tp in mv_orphanage
  * xfs_io: allow chattr &amp; chproj on foreign filesystems
  * xfs_quota: fix free command for foreign fs
  * xfs_quota: un-flag non-foreign-capable commands
  * xfs_quota: Enable 3 more foreign commands
  * xfs_quota: add case for foreign fs, disabled regardless of foreign_allowed
  * xfs_quota: print and path output formatting: maintain reverse compatibility
  * libxcmd: populate fs table with xfs entries first, foreign entries last
  * xfs_repair: exit with status 2 if log dirtiness is unknown
  * xfs_db: pass the inode cluster offset when copying inodes
  * xfs_repair: don't crash on ENOSPC rebuilding a btree
  * libxfs/linux.c: Replace use of ustat by stat
  * db: write via array indexing doesn't work
  * xfs_db: properly set dquot_buf when operating on dquot
  * xfs_quota: fix missing break after foreign_allowed option
  * xfs_db: add crc manipulation commands
  * xfs_quota: certain commands must always be available
  * xfs_quota: add capabilities for use on non-XFS filesystems
  * xfs_quota: wire up XFS_GETQSTATV
  * xfs_metadump: don't warn about unobfuscated log with -o
  * xfs_repair: fix naming problems in repair/rmap.c
  * misc: fix libxfs api violations
  * misc: fix Coverity errors
  * libxcmd: fix mount option parsing to find rt/log devices
  * xfs: simple btree query range should look right if LE lookup fails
  * xfs: fix some key handling problems in _btree_simple_query_range
  * xfs: don't perform lookups on zero-height btrees
  * mkfs.xfs: create filesystems with reverse-mappings
  * mkfs: set agsize prior to calculating minimum log size
  * xfs_repair: check for impossible rmap record field combinations
  * xfs_repair: look for mergeable rmaps
  * xfs_repair: merge data &amp; attr fork reverse mappings
  * xfs_repair: add per-AG btree blocks to rmap data and add to rmapbt
  * xfs_repair: rebuild reverse-mapping btree
  * xfs_repair: check existing rmapbt entries against observed rmaps
  * xfs_repair: add fixed-location per-AG rmaps
  * xfs_repair: add inode bmbt block rmaps
  * xfs_repair: record and merge raw rmap data
  * xfs_repair: collect reverse-mapping data for refcount/rmap tree rebuilding
  * xfs_repair: create a slab API for allocating arrays in large chunks
  * xfs_repair: fix fino_bno calculation when rmapbt is enabled
  * xfs_repair: use rmap btree data to check block types
  * xfs_logprint: support rmap redo items
  * xfs_io: add rmap-finish error injection type
  * xfs_growfs: report rmapbt presence
  * xfs_db: introduce the 'fsmap' command to find what owns a set of fsblocks
  * xfs_db: copy the rmap btree
  * xfs_db: spot check rmapbt
  * xfs_db: display rmap btree contents
  * libxfs: add deferred ops item handlers for userspace
  * libxfs: fix various oddities in the kernel import
  * xfs: store rmapbt block count in the AGF
  * xfs_io: add free-extent error injection type
  * xfs_logprint: fix formatting issues with the EFI printing code
  * xfs_repair: preserve in-core meta_uuid while zeroing unused sb portions
  * xfs_io: bmap should print 'delalloc', not '-2'
  * xfs_buflock: add a tool that can be used to find buffer deadlocks
  * libxfs: fix xfs_isset pointer calculation
  * xfs: increase XFS_BTREE_MAXLEVELS to fit the rmapbt
  * xfs: change xfs_bmap_{finish,cancel,init,free} -&gt; xfs_defer_*
  * xfs: rework xfs_bmap_free callers to use xfs_defer_ops
  * xfs: enable the xfs_defer mechanism to process extents to free
  * xfs: introduce interval queries on btrees
  * xfs: support btrees with overlapping intervals for keys
  * xfs: add function pointers for get/update keys to the btree
  * xfs: during btree split, save new block key &amp; ptr for future insertion
  * xfs: set *stat=1 after iroot realloc
  * xfs: fix locking of the rt bitmap/summary inodes
  * xfs: fix attr shortform structure alignment on cris
- Update to 4.7.0
  * xfs_quota: fall back silently if XFS_GETNEXTQUOTA fails
  * xfs_io: implement 'copy_range' command
  * xfs_repair: low memory shouldn't indicate corruption on exit
  * xfs_repair: don't call xfs_sb_quota_from_disk twice
  * xfs_repair: resolve Coverity OVERFLOW_BEFORE_WIDEN
  * libxfs: fix double free in libxfs_alloc_file_space
  * libxfs: fix use after from in xfs_trans_roll
  * xfs: always set rvalp in xfs_dir2_node_trim_free
  * xfs: borrow indirect blocks from freed extent when available
  * xfs: update freeblocks counter after extent deletion
  * xfs: fix computation of inode btree maxlevels
  * xfs_check: process sparse inode chunks correctly
  * xfs_db: Revert "xfs_db: make check work for sparse inodes"
  * xfs_repair: set rsumino version to 2
  * mkfs: better error with incorrect b/s value suffix usage
  * mkfs: fix -l su minval
  * xfs.h: define XFS_IOC_FREEZE even if FIFREEZE is defined
  * xfs_quota: only round up timer reporting &gt; 1 day
  * xfs_quota: check report_mount return value
  * xfs_repair: new secondary superblock search method
  * libxcmd: generalize topology functions
  * xfs_db: defang frag command
  * db: limit AGFL bno array printing
  * xfs_db: allow recalculating CRCs on invalid metadata
  * xfs_db: fix unaligned accesses
  * metadump: limit permissible sector sizes
  * mkfs: conflicting values with disabled crc should fail
  * mkfs: add optional 'reason' for illegal_option
  * mkfs: unit conversions are case insensitive
  * mkfs: don't treat files as though they are block devices
  * mkfs: add string options to generic parsing
  * mkfs: encode conflicts into parsing table
  * mkfs: merge getnum
  * mkfs: table based parsing for converted parameters
  * mkfs: add respecification detection to generic parsing
  * mkfs: use getnum_checked for all ranged parameters
  * mkfs: getbool is redundant
  * mkfs: structify input parameter passing
  * mkfs: validate logarithmic parameters sanely
  * mkfs: validate all input values
  * mkfs: Sanitise the superblock feature macros
  * mkfs: sanitise ftype parameter values.
  * xfsprogs: use common code for multi-disk detection
  * xfs_repair: fix agf limit error messages
  * xfs_quota: print quota id number if the name can't be found
  * xfs_quota: fully support users and groups beginning with digits
  * xfs_io: allow mmap command to reserve some free space
  * xfs_io: modify argument errors of mremap command
  * Merge branch 'progs-misc-fixes-for-4.6' into for-master
  * Merge branch 'libxfs-4.6-sync' into for-master
  * xfs_io: implement 'inode' command
  * mkfs: fix crash when initializing rbmip
  * libxfs: fix up mismerge in libxfs_iflush_int
  * xfs: RT bitmap and summary buffers need verifiers
  * xfs: RT bitmap and summary buffers are not typed
  * xfs: handle errors from -&gt;free_blocks in xfs_btree_kill_iroot
  * xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk</changelog>
  <changelog author="jeffm@suse.com" date="1496404800">- fsr: fix uninitialized fs usage after timeout (bsc#1002699).
  * Added fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Fix crash in xfs_repair when threads fail to start (bsc#1019938).
  * Added xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Added xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Added xfs_repair-fix-thread-creation-failure-recovery.patch</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jeffm@suse.com" date="1510920000">- Update to 4.13.1
  * mkfs: don't overflow the subopts array
- Update to 4.13.0
  * xfs_repair: handle missing extent states
  * mkfs: pass a custom cowextsize into the created filesystem
  * xfs_db: version command misses RMAPBT feature string
  * xfs_repair: don't use do_warn for normal log message
  * libxfs: remove getcwd/chdir dance from initialization
  * xfs_repair: take the ag_lock before recording rmap for a bmbt record
  * mkfs.xfs: Don't stagger AG for a single disk
  * xfs: fix inobt inode allocation search optimization
  * xfs_io: clarify the fsmap documentation
  * fiemap: Fix semantics of max_extents (-n arguments)
  * xfs_repair: fix thread creation failure recovery
  * xfs_repair: add prefetch trace calls to debug thread creation failures
  * xfs_repair: clear pthread_t when pthread_create fails
  * xfs_io: add seek consistency checks
  * fsr: fix uninitialized fs usage after timeout
  * xfs_db: bit fuzzing should read the right bit when flipping
  * xfs_db: make write/fuzz -c and -d work on non-crc filesystems
  * xfs_db: free field list when failing out of fuzz
  * xfs_db: reset metadump output flag
  * xfs_db: btdump should avoid eval for push and pop of cursor
  * xfs_db: use TYP_F_CRC_FUNC for inodes &amp; dquots
  * xfs_db: introduce fuzz command
  * xfs_db: write values into dir/attr blocks and recalculate CRCs
  * xfs_db: print attribute remote value blocks
  * xfs_db: dump dir/attr btrees
  * xfs_db: fix metadump redirection (again)
  * xfs_repair: fix symlink target length checks by changing MAXPATHLEN to XFS_SYMLINK_MAXLEN
  * xfs_metadump: properly handle obfuscation of all remote attribute blocks
  * xfs_io: allow lsattr &amp; lsproj on foreign filesystems
  * libxfs: init -&gt;b_maps on contig buffers for uncached compatibility
  * xfs_db: associate proper type with free inode btree root
  * xfs_io: Print filesystem statfs flags in 'statfs' command
  * xfs: fix multi-AG deadlock in xfs_bunmapi
  * xfs: check that dir block entries don't off the end of the buffer
  * xfs: check _alloc_read_agf buffer pointer before using
  * xfs: set firstfsb to NULLFSBLOCK before feeding it to _bmapi_write
  * xfs: check _btree_check_block value
  * xfs: don't crash on unexpected holes in dir/attr btrees
  * xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub
  * xfs: try to avoid blowing out the transaction reservation when bunmaping a shared extent
- Update to 4.12.0
  * libxfs: propagate transaction block reservations
  * xfs_db: properly set inode type
  * xfs_db: redirect printfs when metadumping to stdout
  * mkfs.xfs: allow specification of 0 data stripe width &amp; unit
  * mkfs: set inode alignment and cluster size for minimum log size estimation
  * mkfs: set agblklog when we're verifying minimum log size
  * libxfs: fix fsmap.h inclusion
  * xfs_db: identify attr dabtree field types correctly
  * xfs_spaceman: fix potential overflowing expression in trim_f()
  * xfs_spaceman: close open file for error case in openfile()
  * xfs_spaceman: fix potential memory leak by malloc in scan_ag
  * xfs_db: improve argument naming in set_cur and set_iocur_type
  * xfs_db: update buffer size when new type is set
  * xfs_spaceman: add group summary mode
  * xfs_spaceman: add a man page
  * xfs_spaceman: Free space mapping command
  * xfs_spaceman: add new speculative prealloc control
  * xfs_spaceman: add FITRIM support
  * xfs_spaceman: space management tool
  * xfs_repair: replace rmap_compare with libxfs version
  * xfs_io: support the new getfsmap ioctl
  * xfs: introduce the XFS_IOC_GETFSMAP ioctl
  * libxfs: use crc32c slice-by-8 variant by default
  * libxcmd: add cvt{int, long} to convert strings to int and long
  * metadump: warn about corruption if log is dirty
  * xfs_metadump: tag metadump image with informational flags
  * xfs_repair: handle reading superblock from image on larger sector size filesystem
  * xfs_db: add alignment filter to freesp command
  * xfs_growfs: ensure target path is an active xfs mountpoint
  * libxfs: fix xfs_trans_alloc_empty namespace
  * xfs: fix unaligned access in xfs_btree_visit_blocks
  * xfs: avoid mount-time deadlock in CoW extent recovery
  * xfs: fix indlen accounting error on partial delalloc conversion
  * xfs: abstract PF_FSTRANS to PF_MEMALLOC_NOFS
  * xfs: reserve enough blocks to handle btree splits when remapping
  * xfs: simplify validation of the unwritten extent bit
  * xfs: introduce xfs_bmapi_remap
  * xfs: pass individual arguments to xfs_bmap_add_extent_hole_real
  * xfs: fix integer truncation in xfs_bmap_remap_alloc
  * xfs: simplify xfs_calc_dquots_per_chunk
  * xfs: implement the GETFSMAP ioctl
  * xfs: add a couple of queries to iterate free extents in the rtbitmap
  * xfs: create a function to query all records in a btree
  * xfs: provide a query_range function for freespace btrees
  * xfs: plumb in needed functions for range querying of the freespace btrees
  * xfs: fix up inode validation failure message
- Update to 4.11.0
  * xfs_io: add missed quotation marks in man page
  * xfs_io: add missed inode command into man page
  * xfs_io: fix statx call for changed UAPI
  * xfs_db: dump metadata btrees via 'btdump'
  * xfs_db: use iocursor type to guess btree geometry if bad magic
  * xfs_db: don't print arrays off the end of a buffer
  * mkfs.xfs: Assign proper defaults to rmapbt and reflink flags
  * xfs_io: Add statx support for PowerPC architecture
  * xfs_io: fix statx definition for non-x86 architecture
  * xfs_db: allow write -d to dqblks
  * xfs_db: allow write -d to inodes
  * xfs_io: hook up statx
  * xfsprogs: fix build dep on configure.ac
  * xfs_repair: pass btnum not magic to phase5 functions
  * xfs_io: Fix "falloc -p" to pass KEEP_SIZE
  * xfs_repair: warn about dirty log with -n option
  * xfs_repair: detect invalid zero-sized symlink inodes
  * xfs_io: support shutdown command on foreign fses
  * libxfs: fix xfs_extent_busy_flush macro definition
  * xfs: verify inline directory data forks
  * xfs: try any AG when allocating the first btree block when reflinking
  * xfs: use iomap new flag for newly allocated delalloc blocks
  * xfs: tune down agno asserts in the bmap code
  * xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
  * xfs: split indlen reservations fairly when under reserved
  * xfs: handle indlen shortage on delalloc extent merge
  * xfs: improve handling of busy extents in the low-level allocator
  * xfs: go straight to real allocations for direct I/O COW writes
  * xfs: allow unwritten extents in the CoW fork
  * xfs: verify free block header fields
  * xfs: check for obviously bad level values in the bmbt root
  * xfs: filter out obviously bad btree pointers
  * xfs: fail _dir_open when readahead fails
  * xfs: fix toctou race when locking an inode to access the data map
  * xfs: glean crc status from mp not flags in xfs_btree_init_block_int
- Update to 4.10.0
  * xfs_metadump: ignore attr leaf with 0 entries
  * libxfs: sync up FSGETXATTR names and definitions with the kernel
  * xfsprogs: Fix building xfsprogs on 32-bit platforms (again)
  * xfs: extsize hints are not unlikely in xfs_bmap_btalloc
  * xfs: use per-AG reservations for the finobt
  * xfs: only update mount/resv fields on success in __xfs_ag_resv_init
  * xfs: verify dirblocklog correctly
  * xfs: fix COW writeback race
  * xfs: fix xfs_mode_to_ftype() prototype
  * xfs_db: Interpret inode's di_format field as unsigned
  * xfs_repair: trash dirattr btrees that cycle to the root
  * xfs_repair: strengthen geometry checks
  * xfs_db: fix the 'source' command when passed as a -c option
  * libxfs: sanitize agcount on load
  * xfs_io: add DAX and CoW extent-size flags to chattr manpage
  * xfs_io: fix missing syncfs command
  * xfs_logprint: handle log operation split of inode item correctly
  * xfs: sanity check inode di_mode
  * xfs: sanity check directory inode di_size
  * xfs_repair: update the manual content about xfs_repair exit status
  * xfs_repair.8: document dirty log conditions
  * xfs_io: implement 'utimes' command
  * libxcmd: add non-iterating user commands
  * xfs_io: make various commands one-shot only
  * libxcmd: don't check generic library commands
  * libxcmd: merge command() and iterate_command()
  * libxcmd: rename args_command to command_iterator
  * libxcmd: check CMD_FLAG_GLOBAL inside args_command()
  * xfs_io: fix some documentation problems
  * xfs_io: fix the minimum arguments to the reflink command
  * xfs_io: prefix dedupe command error messages consistently
  * xfs_io: Improvements to copy_range return code handling
  * xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
  * xfs_logprint: di_gen is unsigned
  * xfs_io: fix building with musl
  * xfs: don't rely on -&gt;total in xfs_alloc_space_available
  * xfs: adjust allocation length in xfs_alloc_space_available
  * xfs: fix bogus minleft manipulations
  * xfs: bump up reserved blocks in xfs_alloc_set_aside
  * xfs: use the actual AG length when reserving blocks
  * xfs: use GPF_NOFS when allocating btree cursors
  * xfs: ignore leaf attr ichdr.count in verifier during log replay
  * xfs: optimise CRC updates
  * xfs: make xfs btree stats less huge
  * xfs: don't allow di_size with high bit set
  * xfs: error out if trying to add attrs and anextents &gt; 0
  * xfs: don't crash if reading a directory results in an unexpected hole
  * xfs: complain if we don't get nextents bmap records
  * xfs: check for bogus values in btree block headers
  * xfs: forbid AG btrees with level == 0
  * xfs: several xattr functions can be void
  * xfs: handle cow fork in xfs_bmap_trace_exlist
  * xfs: pass state not whichfork to trace_xfs_extlist
  * xfs: Move AGI buffer type setting to xfs_read_agi
  * xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
  * fs: xfs: libxfs: constify xfs_nameops structures
  * repair: use new extent lookup helpers in bmap_next_offset
  * xfs: use new extent lookup helpers in __xfs_bunmapi
  * xfs: use new extent lookup helpers in xfs_bmapi_write
  * xfs: use new extent lookup helpers in xfs_bmapi_read
  * xfs: new inode extent list lookup helpers
  * xfs: check minimum block size for CRC filesystems
  * xfs: provide helper for counting extents from if_bytes
  * xfs: check return value of _trans_reserve_quota_nblks
  * xfs: set XFS_DA_OP_OKNOENT in xfs_attr_get
- Removed now-obsolete patches:
  * Removed xfs_repair-clear-pthread_t-when-pthread_create-fails.patch
  * Removed xfs_repair-add-prefetch-trace-calls-to-debug-thread-creation-failures.patch
  * Removed xfs_repair-fix-thread-creation-failure-recovery.patch
  * Removed fsr-fix-uninitialized-fs-usage-after-timeout.patch</changelog>
  <changelog author="jeffm@suse.com" date="1510920001">- Fix building on SLE11
- Added xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Added xfs_io-stat-treat-statfs.f_flags-as-optional.patch</changelog>
  <changelog author="lurodriguez@suse.com" date="1513684800">- Deletes already merged xfs_io-stat-fix-typo-in-statfs-f_flags.patch
- Deletes already merged xfs_io-stat-treat-statfs.f_flags-as-optional.patch
- Refreshes patch xfsprogs-docdir.diff
- Update to v4.14.0:
  * xfs_io: stat: treat statfs.f_flags as optional
  * xfs_io: stat: fix typo in statfs-&gt;f_flags
  * xfsprogs: fix wrong variable types in pwrite/pread code
  * xfs_io: Allow partial writes
  * xfs_io: Add RWF_NOWAIT to pwritev2()
  * xfs_io: Add support for pwritev2()
  * xfs_io: Disable -V if pwritev is not available
  * xfs_repair: always release btree buffers when refcountbt checks fail
  * misc: fix ubsan warnings
  * misc: enable thread sanitizer if the builder wants it
  * misc: enable gcc/clang address sanitizer if the builder wants it
  * misc: enable ubsan if the builder wants it
  * xfs_repair: fix cowextsize field checking and repairing
  * xfs_repair: clear DAX flag from non-file inodes
  * xfs_repair: fix bag memory overwrite problems
  * xfs_io: add new error injection knobs to inject command
  * xfsprogs: explicitly cast troublesome types to match printf  format specifiers
  * db: increase metadump's default overly long extent discard  threshold
  * build: define _DEFAULT_SOURCE with _BSD_SOURCE for preadv
  * xfsprogs: add xfs_spaceman to .gitignore
  * xfs_io: report io error for pwrite -W and -w
  * xfs_metadump: zap stale data in DIR2_LEAF1 dirs
  * metadump: update manpage for dirty log/obfuscation issue
  * kill off u_int*_t types
  * xfs: trim writepage mapping to within eof
  * xfs: handle error if xfs_btree_get_bufs fails
  * xfs: Fix bool initialization/comparison
  * xfs: Don't log uninitialised fields in inode structures
  * xfs: revert "xfs: factor rmap btree size into the indlen calculations"
  * xfs: perag initialization should only touch m_ag_max_usable for AG 0
  * xfs: fix compiler warnings
  * xfs: simplify the rmap code in xfs_bmse_merge
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at
  * xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents
  * xfs: move some code around inside xfs_bmap_shift_extents
  * xfs: use xfs_iext_get_extent in xfs_bmap_first_unused
  * xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert
  * xfs: add a xfs_iext_update_extent helper
  * xfs: relog dirty buffers during swapext bmbt owner change
  * xfs: skip bmbt block ino validation during owner change
  * xfs: don't log dirty ranges for ordered buffers
  * xfs: remove the ip argument to xfs_defer_finish
  * xfs: rename xfs_defer_join to xfs_defer_ijoin
  * xfs: refactor xfs_trans_roll
  * xfs: stop searching for free slots in an inode chunk when there are none</changelog>
  <changelog author="lurodriguez@suse.com" date="1519819200">- adds make_xfs_scrub_interp_explicit.patch, rpm lint complains about
  using env python, when this is used the dependency checker for rpm
  will not be able to resolve dependencies correctly, so an explicit
  interpreter is needed.
- Update to v4.15.0 as it contains major code refactor on mkfs/xfs_mkfs.c
  which would help to eventually consider completing FATE#324503. Changes
  in this release:
  * Fix spelling mistake in mkfs lazy superblock diagnostic
  * Fix grammar and spelling in strings and man pages
  * Add xfs_scrub_fail systemd service file docs entry
  * Update .gitignore list for generated scrub cron file
  * Several updates to use more modern Debian packaging
  * xfsprogs: Release v4.15.0-rc1
  * xfs_scrub: refactor outcome display into a separate helper
  * xfs_scrub: always init phase information
  * xfs_scrub: reclassify some of the warning messages
  * xfs_scrub: reclassify runtime errors
  * xfs_scrub: classify lack of ioctl support as a runtime error
  * xfs_scrub: remove preen mode
  * xfs_mdrestore: Don't rewind source file stream
  * xfs_mdrestore: Add -i option to built-in help
  * xfs_io: fix copy_file_range symbol name collision
  * xfs_scrub: kill dead code
  * xfs_scrub: close dir_fd if we don't get a DIR pointer
  * mkfs: don't create realtime filesystems with reflink enabled
  * xfs_scrub: handle scrub-only kernels more helpfully
  * xfs_scrub: wire up repair ioctl
  * debian/control: remove nonexistent libreadline5-dev build dependency
  * xfs_scrub: integrate services with systemd
  * xfs_scrub: create a script to scrub all xfs filesystems
  * xfs_scrub: progress indicator
  * xfs_scrub: fstrim the free areas if there are no errors on the filesystem
  * xfs_scrub: check summary counters
  * xfs_scrub: optionally use SCSI READ VERIFY commands to scrub data blocks on disk
  * xfs_scrub: scrub file data blocks
  * xfs_scrub: create infrastructure to read verify data blocks
  * xfs_scrub: create a bitmap data structure
  * xfs_scrub: warn about normalized Unicode name collisions
  * xfs_scrub: warn about suspicious characters in directory/xattr names
  * xfs_scrub: check directory connectivity
  * xfs_scrub: scan inodes
  * xfs_scrub: thread-safe stats counter
  * xfs_scrub: scan filesystem and AG metadata
  * xfs_scrub: wrap the scrub ioctl
  * xfs_scrub: filesystem counter collection functions
  * xfs_scrub: add file space map iteration functions
  * xfs_scrub: add space map iteration functions
  * xfs_scrub: add inode iteration functions
  * xfs_scrub: find XFS filesystem geometry
  * xfs_scrub: create an abstraction for a block device
  * xfs_scrub: figure out how many threads we're going to need
  * xfs_scrub: dispatch the various phases of the scrub program
  * xfs_scrub: set up command line argument parsing
  * xfs_scrub: common error handling
  * xfs_scrub: create online filesystem scrub program
  * mkfs: more sunit/swidth sanity checking
  * mkfs: always explain why numeric inputs are invalid
  * mkfs: don't call values 'illegal', they're invalid
  * mkfs: don't crash on dswidth overflow
  * misc: ubsan fixes
  * xfs_db: interpret inode timestamps as signed integers
  * xfsprogs: update dead urls
  * xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT
  * xfs_logprint: fix v3 inode formatting
  * libxfs: use a memory zone for log items
  * libxfs: use a memory zone for transactions
  * libxfs: remove unused buf_fsprivate3
  * xfs: add a proper transaction pointer to struct xfs_buf
  * xfs: remove wrappers around b_fspriv
  * find-api-violations: fix a broken grep pattern
  * xfs_repair: fix libxfs namespace problems
  * xfs_db: fix crash when field list selector string has trailing slash
  * xfs_db: check should deal with cow staging extents correctly
  * libhandle: zap fdhash in fshandle_destroy
  * xfs_io: add a new 'log_writes' command
  * xfs_io: add MAP_SYNC support to mmap()
  * mkfs: do not allow both "dev" and "name" subopts for log or realtime
  * mkfs: pass switch case value directly into getnum/getstr
  * mkfs: un-document removed logarithm based CLI options
  * mkfs: remove logarithm based CLI options
  * mkfs: resolve sector size CLI conflicts
  * mkfs: convert subopt name, val pairs to enums and declared arrays
  * mkfs: support arbitrary conflict specification
  * mkfs: protofile only needs to be set up once
  * mkfs: simplify minimum log size calculation
  * mkfs: use opts parameter during option parsing
  * mkfs: remove use-once default macros
  * mkfs: document sb_feat_args members
  * mkfs: invert project id width boolean name
  * mkfs: remove unused m_uuid in sb_feat_args
  * mkfs: Don't emit default config message yet
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: only skip rmap owner checks for unknown-owner rmap removal
  * xfs: always honor OWN_UNKNOWN rmap removal requests
  * xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order
  * xfs: move xfs_iext_insert tracepoint to report useful information
  * xfs: account for null transactions in bunmapi
  * xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute
  * xfs: add the ability to join a held buffer to a defer_ops
  * xfs: refactor buffer logging into buffer dirtying helper
  * xfs: remove "no-allocation" reservations for file creations
  * xfs: fix leaks on corruption errors in xfs_bmap.c
  * libxfs: libxfs_nproc should never return negative numbers
  * mkfs: tidy up definitions
  * mkfs: move error functions
  * mkfs: cleanup redundant temporary code
  * mkfs: factor log size calculations
  * mkfs: factor initial mount setup
  * mkfs: rework imaxpct calculation
  * mkfs: factor AG alignment
  * mkfs: factor AG geometry calculations
  * mkfs: factor rt device validation
  * mkfs: factor log device validation
  * mkfs: factor data device validation
  * mkfs: factor device opening
  * mkfs: rework stripe calculations
  * mkfs: factor rtdev extent size validation
  * mkfs: fix hidden parameter in DTOBT()
  * mkfs: factor out device size calculations
  * mkfs: factor inode size validation
  * mkfs: factor directory blocksize validation
  * mkfs: factor superblock feature validation
  * mkfs: factor log sector size validation
  * mkfs: factor blocksize validation
  * mkfs: factor sectorsize validation
  * mkfs: rename top level CLI parameters
  * mkfs: introduce default configuration structure
  * mkfs: factor secondary superblock updates
  * mkfs: factor writing AG headers
  * mkfs: factor out device preparation
  * mkfs: factor in memory superblock setup
  * mkfs: factor printing of mkfs config
  * mkfs: Introduce mkfs configuration structure
  * mkfs: factor sector subopts parser
  * mkfs: factor rt subopts parser
  * mkfs: factor naming subopts parser
  * mkfs: factor meta subopts parser
  * mkfs: factor log subopts parser
  * mkfs: factor inode subopts parser
  * mkfs: factor data subopts parser
  * mkfs: factor block subopts parser
  * mkfs: add generic subopt parsing table
  * mkfs: introduce a structure to hold CLI options
  * mkfs: make subopt table const
  * mkfs: disallow specifying the sector size of internal log
  * xfs_db: add missing padding fields
  * xfs_db: print structure padding fields consistently
  * xfs_repair: remove old workqueue stuff in favor of libfrog code
  * libhandle: add missing destructor
  * libfrog: add missing function fs_table_destroy
  * libfrog: move paths.c out of libxcmd
  * libfrog: move conversion factors out of libxcmd
  * libfrog: move topology code out of libxcmd
  * libfrog: create a threaded workqueue
  * libfrog: promote avl64 code from xfs_repair
  * libfrog: move list_sort out of libxfs
  * libfrog: add bit manipulation functions
  * libfrog: move libxfs_log2_roundup to libfrog
  * libfrog: move all the userspace support stuff into a new library
  * man: describe the metadata scrubbing ioctl
  * xfs_io: provide an interface to the scrub ioctls
  * xfs_io: add buf_lru_ref tag to inject table
  * xfs_io: pull xfs errortag definitions from libxfs
  * xfs_io: implement ranged fiemap query
  * xfs_io: fix gcc-7 related printf warnings
  * Merge branch 'libxfs-4.15-sync' into for-next
  * xfs: abstract out dev_t conversions
  * xfs: fix memory leak in xfs_iext_free_last_leaf
  * xfs: fix type usage
  * xfs: remove u_int* type usage
  * xfs: handle zero entries case in xfs_iext_rebalance_leaf
  * xfs: add comments documenting the rebalance algorithm
  * xfs: trivial indentation fixup for xfs_iext_remove_node
  * xfs: remove a superflous assignment in xfs_iext_remove_node
  * xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node
  * xfs: fix number of records handling in xfs_iext_split_leaf
  * xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static
  * xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h
  * xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent
  * xfs: remove the nr_extents argument to xfs_iext_remove
  * xfs: remove the nr_extents argument to xfs_iext_insert
  * xfs: use a b+tree for the in-core extent list
  * xfs: allow unaligned extent records in xfs_bmbt_disk_set_all
  * xfs: remove support for inlining data/extents into the inode fork
  * xfs: simplify xfs_reflink_convert_cow
  * xfs: introduce the xfs_iext_cursor abstraction
  * xfs: iterate over extents in xfs_bmap_extents_to_btree
  * xfs: iterate over extents in xfs_iextents_copy
  * xfs: pass an on-disk extent to xfs_bmbt_validate_extent
  * xfs: treat idx as a cursor in xfs_bmap_collapse_extents
  * xfs: treat idx as a cursor in xfs_bmap_del_extent_*
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay
  * xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real
  * xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real
  * xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real
  * xfs: convert remaining xfs_sb_version_... checks to bool
  * xfs: move error injection tags into their own file
  * xfs: remove inode log format typedef
  * xfs: remove the inode log format from the inode log item
  * xfs: remove redundant assignment to variable bit
  * xfs: compare btree block keys to parent block's keys during scrub
  * xfs: abort dir/attr btree operation if btree is obviously weird
  * xfs: add a new xfs_iext_lookup_extent_before helper
  * xfs: merge xfs_bmap_read_extents into xfs_iread_extents
  * xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent
  * xfs: don't rely on extent indices in xfs_bmap_insert_extents
  * xfs: don't rely on extent indices in xfs_bmap_collapse_extents
  * xfs: update got in xfs_bmap_shift_update_extent
  * xfs: remove xfs_bmse_shift_one
  * xfs: split xfs_bmap_shift_extents
  * xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS
  * xfs: remove if_rdev
  * xfs: remove the never fully implemented UUID fork format
  * xfs: remove XFS_BMAP_TRACE_EXLIST
  * xfs: move pre/post-bmap tracing into xfs_iext_update_extent
  * xfs: remove post-bmap tracing in xfs_bmap_local_to_extents
  * xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real
  * xfs: add a xfs_bmap_fork_to_state helper
  * xfs: scrub quota information
  * xfs: scrub realtime bitmap/summary
  * xfs: scrub directory parent pointers
  * xfs: scrub symbolic links
  * xfs: scrub extended attributes
  * xfs: scrub directory metadata
  * xfs: scrub inode block mappings
  * xfs: scrub inodes
  * xfs: scrub refcount btrees
  * xfs: scrub rmap btrees
  * xfs: scrub inode btrees
  * xfs: scrub free space btrees
  * xfs: scrub the AGI
  * xfs: scrub AGF and AGFL
  * xfs: scrub the secondary superblocks
  * xfs: scrub the shape of a metadata btree
  * xfs: probe the scrub ioctl
  * xfs: create an ioctl to scrub AG metadata
  * xfs: create inode pointer verifiers
  * xfs: refactor btree block header checking functions
  * xfs: refactor btree pointer checks
  * xfs: create block pointer check functions
  * xfs: remove xfs_bmbt_get_state
  * xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all
  * xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq
  * xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update
  * xfs: refactor xfs_bmap_add_extent_unwritten_real
  * xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_delay_real
  * xfs: refactor xfs_bmap_add_extent_hole_real
  * xfs: refactor xfs_bmap_add_extent_hole_delay
  * xfs: refactor xfs_del_extent_real
  * xfs: use the state defines in xfs_bmap_del_extent_real
  * xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay}
  * xfs: move some more code into xfs_bmap_del_extent_real
  * xfs: use xfs_bmap_del_extent_delay for the data fork as well
  * xfs: rename bno to end in __xfs_bunmapi
  * xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi
  * xfs: use xfs_iext_get_extent instead of open coding it
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real</changelog>
  <changelog author="olaf@aepfle.de" date="1523966400">- xfsprogs-devel needs uuid/uuid.h, Require pkgconfig(uuid) (bsc#1089947)</changelog>
  <changelog author="jeffm@suse.com" date="1534852800">- mkfs: avoid divide-by-zero when hardware reports optimal i/o size as 0
  (bsc#1089777)
  - xfsprogs-mkfs-avoid-divide-by-zero-when-hardware-reports-opti.patch</changelog>
  <changelog author="jeffm@suse.com" date="1534852801">- repair: shift inode back into place if corrupted by bad log
  replay (bsc#1105396).
  * Added 0001-repair-shift-inode-back-into-place-if-corrupted-by-b.patch</changelog>
  <changelog author="jeffm@suse.com" date="1540209600">- Explictly disable systemd unit files for scrub (bsc#1105068).</changelog>
  <changelog author="ailiopoulos@suse.com" date="1545220800">- xfs_repair: Fix root inode's parent when it's bogus for sf directory
  (bsc#1119063)
  * Add xfsprogs-repair-Fix-root-inode-s-parent-when-it-s-bogus-f.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576000">- xfs_repair: Add missing braces to allow zeroing of corrupt log
  (bsc#1073421)
  * Add xfsprogs-xfs_repair-Add-missing-braces-to-allow-zeroing-of-co.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1557576001">- xfs_repair: allow '/' in attribute names (bsc#1122271)
  * Add xfsprogs-xfs_repair-allow-in-attribute-names.patch</changelog>
  <changelog author="Anthony Iliopoulos &lt;ailiopoulos@suse.com&gt;" date="1558353600">- xfs_info: enable offline (unmounted) filesystem geometry queries (bsc#1129859)
  * Add xfsprogs-libfrog-refactor-fs-geometry-printing-function.patch
  * Add xfsprogs-mkfs-use-geometry-generation-helper-functions.patch
  * Add xfsprogs-xfs-hoist-xfs_fs_geometry-to-libxfs.patch
  * Add xfsprogs-xfs-refactor-the-geometry-structure-filling-function.patch
  * Add xfsprogs-xfs_db-add-a-superblock-info-command.patch
  * Add xfsprogs-xfs_info-call-xfs_db-for-offline-filesystems.patch
  * Add xfsprogs-xfs_info-move-to-xfs_spaceman.patch
  * Add xfsprogs-xfs_info-use-findmnt-to-handle-mounted-block-devices.patch
  * Add xfsprogs-xfs_spaceman-add-a-superblock-info-command.patch</changelog>
</package>
<package pkgid="d59490b73bf83eb8dd18301dfd8608af6717a5232fdd6d7afa846bab64e83b23" name="xz" arch="i586">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="c8ed75a4cad8cba1a6a3ade818fa8dc31767ebdd65f364898df51a3d06ee1c3a" name="xz" arch="src">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1411473600">- xz 5.0.7:
  * Fix regressions introduced in 5.0.6:
  - Fix building with non-GNU make.
  - Fix invalid Libs.private value in liblzma.pc which broke
    static linking against liblzma if the linker flags were
    taken from pkg-config.
- include changes from 5.0.6:
  * xzgrep now exits with status 0 if at least one file matched.
  * A few minor portability and build system fixes</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="000156a757eb85cdade3d053e808d73be969a9e2407665da9a1491e38ad08dca" name="xz" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="ea50e4738639b0836469f9b3d38438b4004d6b01afa8078fc930c9ca8c90813c" name="xz-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="1c1d19cc268fac47afd235f9f8efa9d5a59edc177bf0ab4a502dfceabff8f9e6" name="xz-devel" arch="i586">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="e956983de8ce3c91e237950582f9caf48b54b0a7bda151c89c8ac22d00777ee2" name="xz-devel" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="ed8ae898569f3564175ee5562ff7862f7c213a47213c2070868bb7ab047f850e" name="xz-lang" arch="noarch">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="13e70be4d56ad146373fa20274ac3d67c5c09371eed7a9741674ce67a0415967" name="xz-static-devel" arch="i586">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="eb8304e94b025499495f2e99a23d0489040a71525fbdeef703641927cfdaed4a" name="xz-static-devel" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="lp151.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1418904000">- Build XZ with full RELRO.</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508800">- xz 5.0.8:
  * Fixed an old bug in xzgrep that affected OpenBSD and probably
    a few other operating systems too.
  * Updated French and German translations.
  * Minor build system update</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419508801">- xz 5.2.0:
  * liblzma:
  - Added support for multi-threaded compression
  - Made the uses of lzma_allocator const correct.
  - Added lzma_block_uncomp_encode() to create uncompressed
    .xz Blocks using LZMA2 uncompressed chunks.
  - Added support for LZMA_IGNORE_CHECK.
  - A few speed optimizations were made.
  - Added support for symbol versioning. It is enabled by default
    on GNU/Linux, other GNU-based systems, and FreeBSD.
  * xz:
  - Fixed a race condition in the signal handling
  - Multi-threaded decompression can be enabled with the
  - -threads (-T) option.
  - New command line options in xz: --single-stream,
  - -block-size=SIZE, --block-list=SIZES,
  - -flush-timeout=TIMEOUT, and --ignore-check.
  - xz -lvv now shows the minimum xz version that is required to
    decompress the file. Currently it is 5.0.0 for all supported
    .xz files except files with empty LZMA2 streams require 5.0.2.
  * xzdiff and xzgrep now support .lzo files if lzop is installed.
    The .tzo suffix is also recognized as a shorthand for .tar.lzo.</changelog>
  <changelog author="rguenther@suse.com" date="1421841600">- Avoid running configure twice and using -fprofile-generate or
  - fprofile-use for compiling configure tests when profiling.</changelog>
  <changelog author="astieger@suse.com" date="1425038400">- xz 5.2.1:
  * Fixed a compression-ratio regression in fast mode of LZMA1 and
    LZMA2.</changelog>
  <changelog author="astieger@suse.com" date="1443528000">- xz 5.2.2:
  * Omitted the use of pipe2() even if it is available to avoid
    portability issues with some old Linux and glibc combinations
  * Updated German translation
  * Documented that threaded decompression is not implemented yet</changelog>
  <changelog author="hpj@urpla.net" date="1446984000">- add xznew{,.1}, converted from bznew</changelog>
  <changelog author="hpj@urpla.net" date="1447156800">- fix conversion: spell the missed parts correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="3bab5c1477480e1273f060ccd41c7cac673501319c534c2d600f78526a18c463" name="yast2" arch="i586">
  <version epoch="0" ver="4.1.71" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1547640000">- Support special products which will be enabled via linuxrc
  (flag "specialproduct") (fate#327099)
- 4.1.52</changelog>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553688000">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
</package>
<package pkgid="0b981a3ef1b5c611f18ee217b6639702f5e21e81d22166b072148906518515e8" name="yast2" arch="src">
  <version epoch="0" ver="4.1.71" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1547640000">- Support special products which will be enabled via linuxrc
  (flag "specialproduct") (fate#327099)
- 4.1.52</changelog>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553688000">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
</package>
<package pkgid="f93368ea76e2d0ec14e005fe98de86eadae9f724103f9ffdf5aa86ce6219a120" name="yast2" arch="x86_64">
  <version epoch="0" ver="4.1.71" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1547640000">- Support special products which will be enabled via linuxrc
  (flag "specialproduct") (fate#327099)
- 4.1.52</changelog>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553688000">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
</package>
<package pkgid="1470216649aefdc0e1b42ee089b1c4a2f7ba5ad423c2c61d75a376a8481c9791" name="yast2" arch="i586">
  <version epoch="0" ver="4.1.72" rel="lp151.2.7.1"/>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553601600">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
  <changelog author="mvidner@suse.com" date="1560945600">- Stop "ls: write error: Broken pipe" messages (bsc#1128032)
- 4.1.72</changelog>
</package>
<package pkgid="c2febd7b7c479ec717230d679d26e2721021ed31f10e146211b03d8fddd39578" name="yast2" arch="src">
  <version epoch="0" ver="4.1.72" rel="lp151.2.7.1"/>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553601600">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
  <changelog author="mvidner@suse.com" date="1560945600">- Stop "ls: write error: Broken pipe" messages (bsc#1128032)
- 4.1.72</changelog>
</package>
<package pkgid="8321b224baede3fbed1dd22a673311aac180e102287d98fbec035a90e3f23b22" name="yast2" arch="x86_64">
  <version epoch="0" ver="4.1.72" rel="lp151.2.7.1"/>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553601600">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
  <changelog author="mvidner@suse.com" date="1560945600">- Stop "ls: write error: Broken pipe" messages (bsc#1128032)
- 4.1.72</changelog>
</package>
<package pkgid="4bd2a37383e4f29babec68d10e2f68a5e8a38f7736d39dda913cf94a04b488c3" name="yast2-add-on" arch="noarch">
  <version epoch="0" ver="4.1.12" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1512388800">- Fixed adding multiple products from a multi-product medium
  (bsc#1062813)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
</package>
<package pkgid="3657b7efe403c22cf7cb60cdd3eed34d93273801708c42fea89cafe9180bc501" name="yast2-add-on" arch="src">
  <version epoch="0" ver="4.1.12" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1512388800">- Fixed adding multiple products from a multi-product medium
  (bsc#1062813)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
</package>
<package pkgid="aab76bcb5a55273ead69eb0d1c4dfafaf87edbd6ec7cd0981a3fac7e11b1adca" name="yast2-add-on" arch="noarch">
  <version epoch="0" ver="4.1.12" rel="lp151.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1512388800">- Fixed adding multiple products from a multi-product medium
  (bsc#1062813)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
</package>
<package pkgid="41dd2a1fd887e5bf9df8018092c3ec43fdda6bcfb026da9751b640a224dde81e" name="yast2-add-on" arch="src">
  <version epoch="0" ver="4.1.12" rel="lp151.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1512388800">- Fixed adding multiple products from a multi-product medium
  (bsc#1062813)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
</package>
<package pkgid="62cd43b4fc5db2c1a0f6e35ad71e1a9d96f15e890cff9dbb8f08b28a3e46e0c0" name="yast2-add-on" arch="noarch">
  <version epoch="0" ver="4.1.13" rel="lp151.2.10.1"/>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1561982400">- Do not abort when an addon license is refused (bsc#1114018).
- 4.1.13</changelog>
</package>
<package pkgid="c67a6779c1227a1badf6c1b4d77a197bad11348540d5678b10d469d00953eb9d" name="yast2-add-on" arch="src">
  <version epoch="0" ver="4.1.13" rel="lp151.2.10.1"/>
  <changelog author="schubi@suse.de" date="1513771200">- Improved error message for adding a product. (bnc#1071173)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1515412800">- Fixed a crash when when adding an addon (bsc#1074766)
- 4.0.5</changelog>
  <changelog author="mvidner@suse.com" date="1518004800">- Made the addon=url boot option work with a multi-product medium
  such as the SLE-15 Packages DVD (FATE#324656)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1521720000">- AutoYaST: Reporting missing AY configuration file entries.
  (bnc#1084596)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534400">- Allow the user to change the CD/DVD when using addon=dvd:///
  (bsc#1082789).
- 4.0.8</changelog>
  <changelog author="diazglezdavid@gmail.com" date="1528718400">- Do not ignore "priority" property when store sources (bsc#1081509)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.1.1</changelog>
  <changelog author="dgonzalez@suse.com" date="1532347200">- Refactor AddOn auto client (bsc#1081509)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.
- Changed dir of COPYING file.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371200">- Do not show the main dialog when it is immediately skipped
  (bsc#1102705)
- 4.1.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1535371201">- Fixing some import dependencies in the AddOn auto client
  (bsc#1081509)
- 4.1.4</changelog>
  <changelog author="dgonzalez@suse.com" date="1535630400">- Fix the run of AddOn auto client (bsc#1106536).
- Add missing dependencies to the AddOn auto client.
- 4.1.5</changelog>
  <changelog author="dgonzalez@suse.com" date="1536753600">- Fix and improve the repo name selection in the AddOn auto client
  (bsc#1108139)
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed path to license file. . Build error in bsc#1108139.
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.8</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed displaying previous dialog content when going back and
  forth in the installation workflow (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Removing add-on repo: Deselecting product in solver too.
  (bsc#1077399)
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1558526400">- Fix: Update repository will be registered while installing
  an add-on on a running system (bsc#1055126).
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1561982400">- Do not abort when an addon license is refused (bsc#1114018).
- 4.1.13</changelog>
</package>
<package pkgid="27f4a6f3de9119305d52fba5d47b17ecf24338bb26174a75f99cb493f2b1dcac" name="yast2-country" arch="i586">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Changed dir of COPYING file.
- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1538049600">- Set only system time if no hardware clock available (bsc#1103744)
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1540555200">- Console: Use empty string instead of none for FONTMAP
  (bsc#1013573)
- 4.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1541764800">- provide better API for getting keyboard map info (fate#325748)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1541851200">- Timezone: Since ntp-client does not write the config anymore when
  called for syncing only, we need to remove the 'ntpdate_only'
  parameter in order to continue proposing a default when it is
  enabled in the control file (bsc#1108497).
- 4.1.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542024000">- Timezone: When ntp is configured to be used by default, offer
  also ntp servers proposed by DHCP but do not choose them if the
  user does not select one explicitly (fate#323454)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542715200">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.5</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1545134400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- drop policy kit definitions as yast2-dbus-server is already
  dropped
- 4.1.7</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- fix timezone setting when switching utc/local time (bsc#1087228)
- 4.1.8</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551355200">- Fix OS detection and use correct keyboard file for opensuse
  (bsc#1124921).
- Remove incompatible Lithuanian layout from opensuse file.
- 4.1.9</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552651200">- Add support to set the language as read-only in the control file,
  which allows to change it during the installation without
  persisting it in the installed system (bsc#1121256).
- 4.1.10</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1552996800">- Fix command line parameter to systemd-firstboot (--root instead
  of -root) (part of bsc#1121256).
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1557403200">- Fix: Keyboard language cannot be changed in textmode
  (bsc#1120957).
- 4.1.12</changelog>
  <changelog author="schubi@suse.de" date="1558958400">- Language change: Warning if no repo is available for installing
  translation packages (bsc#1133414).
- 4.1.13</changelog>
</package>
<package pkgid="80aa263e0888603f84cd2b965700ca7849bf465165ddde549050c3bf65d8dc94" name="yast2-country" arch="src">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Changed dir of COPYING file.
- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1538049600">- Set only system time if no hardware clock available (bsc#1103744)
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1540555200">- Console: Use empty string instead of none for FONTMAP
  (bsc#1013573)
- 4.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1541764800">- provide better API for getting keyboard map info (fate#325748)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1541851200">- Timezone: Since ntp-client does not write the config anymore when
  called for syncing only, we need to remove the 'ntpdate_only'
  parameter in order to continue proposing a default when it is
  enabled in the control file (bsc#1108497).
- 4.1.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542024000">- Timezone: When ntp is configured to be used by default, offer
  also ntp servers proposed by DHCP but do not choose them if the
  user does not select one explicitly (fate#323454)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542715200">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.5</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1545134400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- drop policy kit definitions as yast2-dbus-server is already
  dropped
- 4.1.7</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- fix timezone setting when switching utc/local time (bsc#1087228)
- 4.1.8</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551355200">- Fix OS detection and use correct keyboard file for opensuse
  (bsc#1124921).
- Remove incompatible Lithuanian layout from opensuse file.
- 4.1.9</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552651200">- Add support to set the language as read-only in the control file,
  which allows to change it during the installation without
  persisting it in the installed system (bsc#1121256).
- 4.1.10</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1552996800">- Fix command line parameter to systemd-firstboot (--root instead
  of -root) (part of bsc#1121256).
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1557403200">- Fix: Keyboard language cannot be changed in textmode
  (bsc#1120957).
- 4.1.12</changelog>
  <changelog author="schubi@suse.de" date="1558958400">- Language change: Warning if no repo is available for installing
  translation packages (bsc#1133414).
- 4.1.13</changelog>
</package>
<package pkgid="e5d36b28d220bf06bb0f11900820e5fd3973425756862bce17a1f3272267bb49" name="yast2-country" arch="x86_64">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Changed dir of COPYING file.
- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1538049600">- Set only system time if no hardware clock available (bsc#1103744)
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1540555200">- Console: Use empty string instead of none for FONTMAP
  (bsc#1013573)
- 4.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1541764800">- provide better API for getting keyboard map info (fate#325748)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1541851200">- Timezone: Since ntp-client does not write the config anymore when
  called for syncing only, we need to remove the 'ntpdate_only'
  parameter in order to continue proposing a default when it is
  enabled in the control file (bsc#1108497).
- 4.1.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542024000">- Timezone: When ntp is configured to be used by default, offer
  also ntp servers proposed by DHCP but do not choose them if the
  user does not select one explicitly (fate#323454)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542715200">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.5</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1545134400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- drop policy kit definitions as yast2-dbus-server is already
  dropped
- 4.1.7</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- fix timezone setting when switching utc/local time (bsc#1087228)
- 4.1.8</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551355200">- Fix OS detection and use correct keyboard file for opensuse
  (bsc#1124921).
- Remove incompatible Lithuanian layout from opensuse file.
- 4.1.9</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552651200">- Add support to set the language as read-only in the control file,
  which allows to change it during the installation without
  persisting it in the installed system (bsc#1121256).
- 4.1.10</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1552996800">- Fix command line parameter to systemd-firstboot (--root instead
  of -root) (part of bsc#1121256).
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1557403200">- Fix: Keyboard language cannot be changed in textmode
  (bsc#1120957).
- 4.1.12</changelog>
  <changelog author="schubi@suse.de" date="1558958400">- Language change: Warning if no repo is available for installing
  translation packages (bsc#1133414).
- 4.1.13</changelog>
</package>
<package pkgid="dcdaec59754c9678a17f1e4dcff5c36251f61729bf8fb74da503a10361d832fe" name="yast2-country-data" arch="i586">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Changed dir of COPYING file.
- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1538049600">- Set only system time if no hardware clock available (bsc#1103744)
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1540555200">- Console: Use empty string instead of none for FONTMAP
  (bsc#1013573)
- 4.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1541764800">- provide better API for getting keyboard map info (fate#325748)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1541851200">- Timezone: Since ntp-client does not write the config anymore when
  called for syncing only, we need to remove the 'ntpdate_only'
  parameter in order to continue proposing a default when it is
  enabled in the control file (bsc#1108497).
- 4.1.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542024000">- Timezone: When ntp is configured to be used by default, offer
  also ntp servers proposed by DHCP but do not choose them if the
  user does not select one explicitly (fate#323454)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542715200">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.5</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1545134400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- drop policy kit definitions as yast2-dbus-server is already
  dropped
- 4.1.7</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- fix timezone setting when switching utc/local time (bsc#1087228)
- 4.1.8</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551355200">- Fix OS detection and use correct keyboard file for opensuse
  (bsc#1124921).
- Remove incompatible Lithuanian layout from opensuse file.
- 4.1.9</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552651200">- Add support to set the language as read-only in the control file,
  which allows to change it during the installation without
  persisting it in the installed system (bsc#1121256).
- 4.1.10</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1552996800">- Fix command line parameter to systemd-firstboot (--root instead
  of -root) (part of bsc#1121256).
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1557403200">- Fix: Keyboard language cannot be changed in textmode
  (bsc#1120957).
- 4.1.12</changelog>
  <changelog author="schubi@suse.de" date="1558958400">- Language change: Warning if no repo is available for installing
  translation packages (bsc#1133414).
- 4.1.13</changelog>
</package>
<package pkgid="f97fb720abb64889155802ba8652e4f80a836de4842f8dd118e12e83201fb3f2" name="yast2-country-data" arch="x86_64">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Changed dir of COPYING file.
- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1538049600">- Set only system time if no hardware clock available (bsc#1103744)
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1540555200">- Console: Use empty string instead of none for FONTMAP
  (bsc#1013573)
- 4.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1541764800">- provide better API for getting keyboard map info (fate#325748)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1541851200">- Timezone: Since ntp-client does not write the config anymore when
  called for syncing only, we need to remove the 'ntpdate_only'
  parameter in order to continue proposing a default when it is
  enabled in the control file (bsc#1108497).
- 4.1.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542024000">- Timezone: When ntp is configured to be used by default, offer
  also ntp servers proposed by DHCP but do not choose them if the
  user does not select one explicitly (fate#323454)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542283200">- Fallback to English when using fbiterm on those languages
  which are not properly supported (fate#325746).
- 4.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1542715200">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.5</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1545134400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- drop policy kit definitions as yast2-dbus-server is already
  dropped
- 4.1.7</changelog>
  <changelog author="snwint@suse.com" date="1550491200">- fix timezone setting when switching utc/local time (bsc#1087228)
- 4.1.8</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551355200">- Fix OS detection and use correct keyboard file for opensuse
  (bsc#1124921).
- Remove incompatible Lithuanian layout from opensuse file.
- 4.1.9</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552651200">- Add support to set the language as read-only in the control file,
  which allows to change it during the installation without
  persisting it in the installed system (bsc#1121256).
- 4.1.10</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1552996800">- Fix command line parameter to systemd-firstboot (--root instead
  of -root) (part of bsc#1121256).
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1557403200">- Fix: Keyboard language cannot be changed in textmode
  (bsc#1120957).
- 4.1.12</changelog>
  <changelog author="schubi@suse.de" date="1558958400">- Language change: Warning if no repo is available for installing
  translation packages (bsc#1133414).
- 4.1.13</changelog>
</package>
<package pkgid="5a947b4fd8a27d39adb41e61d6132430f292b7869559d15d9149add3f04f6ea2" name="yast2-firstboot" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1470916800">- Reimplemented "create user" and "root password" steps to reuse
  the new installation dialogs instead of the obsolete ones.
- More sensible order for the mentioned steps in the default
  configuration file.
- Removed from the default configuration file the obsolete step
  for configuring authentication.
- bsc#992245, bsc#991863
- 3.1.15</changelog>
  <changelog author="ancor@suse.com" date="1471003200">- Faster response when the user skips the creation of a new user
  (bsc#992245).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1472040000">- fix not showing errors as popup in firstboot (bnc#994892)
- 3.1.17</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1512043201">- Bring back HostnameDialog adding it into firstboot_hostname once
  it was removed from yast2-network (bsc#1028371, bsc#1070388).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1516104000">- Do not initialize firstboot in AutoYaST upgrade mode.
  (Additial fix for bnc#1075744)
- 4.0.2</changelog>
  <changelog author="jsrain@suse.cz" date="1518091200">- adapted to changes in the Language module (bsc#1079852)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1521547200">- Added firstboot.glade symlink to include also the firstboot.xml
  texts in the generated POT file, removed the old Makefile hack
  (bsc#1085888)
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Allow going back from finish step and unified halt (bsc#1095253)
- 4.0.5</changelog>
  <changelog author="knut.anderssen@suse.com" date="1533729600">- Import missing GetInstArgs module in firstboot_write client
  (bsc#1104158)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1543492800">- Added firstboot.rnc file to desktop file. This is needed for
  building yast2-schema (bnc#1117068).
- 4.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1544097600">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1547208000">- Fixed textdomain name (bsc#1121643)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1548417600">- Add integration with the yast2-configuration-management module
  (fate#322722).
- 4.1.4</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1549627200">- Support going back when using the yast2-configuration-management
  module integration (fate#322722).
- 4.1.5</changelog>
  <changelog author="lnussel@suse.de" date="1554984000">- Disable duplicate license dialogs (boo#131301)
- Initialize product in firstboot (boo#1132189)
- 4.1.6</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1557748800">- Update the firstboot.xml template to use the "firstboot_licenses"
  client for the license agreement.
- Adapt the "firstboot_licenses" client to cover all possible
  scenarios: to display the Novell license agreement, the vendor
  license agreement, both or simply the default one (bsc#1131327).
- 4.1.7</changelog>
</package>
<package pkgid="db8e78cdcea48f5f891d2b1512bf8811f4436f0c992e1312e20c882cda1f1508" name="yast2-firstboot" arch="src">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1470916800">- Reimplemented "create user" and "root password" steps to reuse
  the new installation dialogs instead of the obsolete ones.
- More sensible order for the mentioned steps in the default
  configuration file.
- Removed from the default configuration file the obsolete step
  for configuring authentication.
- bsc#992245, bsc#991863
- 3.1.15</changelog>
  <changelog author="ancor@suse.com" date="1471003200">- Faster response when the user skips the creation of a new user
  (bsc#992245).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1472040000">- fix not showing errors as popup in firstboot (bnc#994892)
- 3.1.17</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1512043201">- Bring back HostnameDialog adding it into firstboot_hostname once
  it was removed from yast2-network (bsc#1028371, bsc#1070388).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1516104000">- Do not initialize firstboot in AutoYaST upgrade mode.
  (Additial fix for bnc#1075744)
- 4.0.2</changelog>
  <changelog author="jsrain@suse.cz" date="1518091200">- adapted to changes in the Language module (bsc#1079852)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1521547200">- Added firstboot.glade symlink to include also the firstboot.xml
  texts in the generated POT file, removed the old Makefile hack
  (bsc#1085888)
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Allow going back from finish step and unified halt (bsc#1095253)
- 4.0.5</changelog>
  <changelog author="knut.anderssen@suse.com" date="1533729600">- Import missing GetInstArgs module in firstboot_write client
  (bsc#1104158)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1534766400">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1543492800">- Added firstboot.rnc file to desktop file. This is needed for
  building yast2-schema (bnc#1117068).
- 4.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1544097600">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1547208000">- Fixed textdomain name (bsc#1121643)
- 4.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1548417600">- Add integration with the yast2-configuration-management module
  (fate#322722).
- 4.1.4</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1549627200">- Support going back when using the yast2-configuration-management
  module integration (fate#322722).
- 4.1.5</changelog>
  <changelog author="lnussel@suse.de" date="1554984000">- Disable duplicate license dialogs (boo#131301)
- Initialize product in firstboot (boo#1132189)
- 4.1.6</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1557748800">- Update the firstboot.xml template to use the "firstboot_licenses"
  client for the license agreement.
- Adapt the "firstboot_licenses" client to cover all possible
  scenarios: to display the Novell license agreement, the vendor
  license agreement, both or simply the default one (bsc#1131327).
- 4.1.7</changelog>
</package>
<package pkgid="ad3c675a5a4c0b7e21ff6396e5792e49eb7ce776d989a1f00b4a41c38930c47b" name="yast2-installation" arch="noarch">
  <version epoch="0" ver="4.1.46" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1542369600">- Prefer fbiterm whenever is possible for textmode installation
  (fate#325746).
- 4.1.28</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1542801600">- Documented new control.xml global parameter enable_local_users
  (Fate#326447)
- Improved English in the documentation of control.xml
- 4.1.29</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.30</changelog>
  <changelog author="lslezak@suse.cz" date="1544097600">- Improved saving y2logs during installation to use the /mnt/tmp
  space instead of the RAM disk to avoid possible crash (out of
  memory) (bsc#1118643)
- 4.1.31</changelog>
  <changelog author="lslezak@suse.cz" date="1544184000">- More aggresive inst-sys cleaner, clean the libzypp cache
  when running in graphical mode with less than 1GB RAM
  (in text mode keep the current limit 640MB), this avoids
  crashes on low memory systems (bsc#1118643)
- Also adapted the computing the default y2log size - use
  smaller size in low memory systems, on the other hand limit the
  maximum size to avoid huge log files
- 4.1.32</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1544616000">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.33</changelog>
  <changelog author="jlopez@suse.com" date="1545048000">- Hardening commands execution (part of bsc#1118291).
- Replace backticks by Yast::Execute.
- 4.1.34</changelog>
  <changelog author="jreidinger@suse.com" date="1546516800">- remove no longer used SCR agents without replacement:
  sysconfig.boot, sysconfig.fam, etc.passwd and
  install_inf workarounds for aliases and options
- remove no longer used clients:
  - inst_ask_online_update replaced by registration for SLE and
  online_repos for openSUSE.
  - inst_check_autoinst_mode dropped without replacement. Floppy
  support was dropped.
  - inst_scenarios replaced by system roles.
  - update_wizard_steps replaced by direct call of code without
    client</changelog>
  <changelog author="schubi@suse.de" date="1549022400">- Copying SSH keys from a privious installation into the new one:
  Set the right file permissions for the SSH deamon (bnc#1122303).
- 4.1.35</changelog>
  <changelog author="lslezak@suse.cz" date="1550145600">- Save the used repositories at the end of installation to not
  offer the driver packages again (bsc#953522)
- 4.1.36</changelog>
  <changelog author="mvidner@suse.com" date="1551441600">- copy_files_finish: ensure that /mnt/etc/YaST2 exists (bsc#1127182).
- 4.1.37</changelog>
  <changelog author="mvidner@suse.com" date="1551787200">- Respect Textmode=1 when installing over SSH with a DISPLAY (bsc#1047470)
- 4.1.38</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551787201">- Do not write the displaymanager value (part of bsc#1125040).
- 4.1.39</changelog>
  <changelog author="jreidinger@suse.com" date="1551873600">- Do not change polkit default priviledges during upgrade
  (bsc#1120720)
- 4.1.40</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551960000">- Retranslate also the side bar steps when changing the language
  (bsc#1128153)
- 4.1.41</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552046400">- Fix patterns and packages selection when going back to the system
  role selection (bsc#1126517).
- 4.1.42</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552392000">- Update the hard-coded fallback path for licenses directory
  (fate#324053, jsc#SLE-4173)
- 4.1.43</changelog>
  <changelog author="snwint@suse.com" date="1552564800">- ensure that installation with VNC + textmode still installs
  via VNC (bsc#1129073)
- 4.1.44</changelog>
  <changelog author="snwint@suse.com" date="1552651200">- revert SSH textmode patches (bsc#1129375, bsc#1047470)
- 4.1.45</changelog>
  <changelog author="schubi@suse.de" date="1557489600">- Downloading files: Remounting CD with bind option correctly if
  the CD has already been mounted (bsc#1132915).
- 4.1.46</changelog>
</package>
<package pkgid="32cdb11e6c6bf21b1bbedc457923e5b004407c3e1b452678bd2d1e105a175ffd" name="yast2-installation" arch="src">
  <version epoch="0" ver="4.1.46" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1542369600">- Prefer fbiterm whenever is possible for textmode installation
  (fate#325746).
- 4.1.28</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1542801600">- Documented new control.xml global parameter enable_local_users
  (Fate#326447)
- Improved English in the documentation of control.xml
- 4.1.29</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543060800">- Provide icon with module (boo#1109310)
- 4.1.30</changelog>
  <changelog author="lslezak@suse.cz" date="1544097600">- Improved saving y2logs during installation to use the /mnt/tmp
  space instead of the RAM disk to avoid possible crash (out of
  memory) (bsc#1118643)
- 4.1.31</changelog>
  <changelog author="lslezak@suse.cz" date="1544184000">- More aggresive inst-sys cleaner, clean the libzypp cache
  when running in graphical mode with less than 1GB RAM
  (in text mode keep the current limit 640MB), this avoids
  crashes on low memory systems (bsc#1118643)
- Also adapted the computing the default y2log size - use
  smaller size in low memory systems, on the other hand limit the
  maximum size to avoid huge log files
- 4.1.32</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1544616000">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.33</changelog>
  <changelog author="jlopez@suse.com" date="1545048000">- Hardening commands execution (part of bsc#1118291).
- Replace backticks by Yast::Execute.
- 4.1.34</changelog>
  <changelog author="jreidinger@suse.com" date="1546516800">- remove no longer used SCR agents without replacement:
  sysconfig.boot, sysconfig.fam, etc.passwd and
  install_inf workarounds for aliases and options
- remove no longer used clients:
  - inst_ask_online_update replaced by registration for SLE and
  online_repos for openSUSE.
  - inst_check_autoinst_mode dropped without replacement. Floppy
  support was dropped.
  - inst_scenarios replaced by system roles.
  - update_wizard_steps replaced by direct call of code without
    client</changelog>
  <changelog author="schubi@suse.de" date="1549022400">- Copying SSH keys from a privious installation into the new one:
  Set the right file permissions for the SSH deamon (bnc#1122303).
- 4.1.35</changelog>
  <changelog author="lslezak@suse.cz" date="1550145600">- Save the used repositories at the end of installation to not
  offer the driver packages again (bsc#953522)
- 4.1.36</changelog>
  <changelog author="mvidner@suse.com" date="1551441600">- copy_files_finish: ensure that /mnt/etc/YaST2 exists (bsc#1127182).
- 4.1.37</changelog>
  <changelog author="mvidner@suse.com" date="1551787200">- Respect Textmode=1 when installing over SSH with a DISPLAY (bsc#1047470)
- 4.1.38</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1551787201">- Do not write the displaymanager value (part of bsc#1125040).
- 4.1.39</changelog>
  <changelog author="jreidinger@suse.com" date="1551873600">- Do not change polkit default priviledges during upgrade
  (bsc#1120720)
- 4.1.40</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551960000">- Retranslate also the side bar steps when changing the language
  (bsc#1128153)
- 4.1.41</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552046400">- Fix patterns and packages selection when going back to the system
  role selection (bsc#1126517).
- 4.1.42</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552392000">- Update the hard-coded fallback path for licenses directory
  (fate#324053, jsc#SLE-4173)
- 4.1.43</changelog>
  <changelog author="snwint@suse.com" date="1552564800">- ensure that installation with VNC + textmode still installs
  via VNC (bsc#1129073)
- 4.1.44</changelog>
  <changelog author="snwint@suse.com" date="1552651200">- revert SSH textmode patches (bsc#1129375, bsc#1047470)
- 4.1.45</changelog>
  <changelog author="schubi@suse.de" date="1557489600">- Downloading files: Remounting CD with bind option correctly if
  the CD has already been mounted (bsc#1132915).
- 4.1.46</changelog>
</package>
<package pkgid="9e1c32353eaddf4ffd6ad0317ff11437d6089249bcb9fca98707f47c09f07f3f" name="yast2-logs" arch="i586">
  <version epoch="0" ver="4.1.71" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1547640000">- Support special products which will be enabled via linuxrc
  (flag "specialproduct") (fate#327099)
- 4.1.52</changelog>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553688000">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
</package>
<package pkgid="0d572cceda1fdebb1659a6fbaf598e807f8ee103be80a71a18618f5c7099fe19" name="yast2-logs" arch="x86_64">
  <version epoch="0" ver="4.1.71" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1547640000">- Support special products which will be enabled via linuxrc
  (flag "specialproduct") (fate#327099)
- 4.1.52</changelog>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553688000">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
</package>
<package pkgid="54f3c07f921a5df4e1e03088e5dbf5180869bca6e103de28145aaabbda469749" name="yast2-logs" arch="i586">
  <version epoch="0" ver="4.1.72" rel="lp151.2.7.1"/>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553601600">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
  <changelog author="mvidner@suse.com" date="1560945600">- Stop "ls: write error: Broken pipe" messages (bsc#1128032)
- 4.1.72</changelog>
</package>
<package pkgid="c31addc7754cba817200085bd7ebc9927c73ee75c1dc7d0509e8567d8e467163" name="yast2-logs" arch="x86_64">
  <version epoch="0" ver="4.1.72" rel="lp151.2.7.1"/>
  <changelog author="knut.anderssen@suse.com" date="1547726400">- CWM: Added date field and time field widgets (fate#322722)
- 4.1.53</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- Firewall: added some help methods for moving interfaces between
  zones in a safe way (fate#324662).
- 4.1.54</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed license file ordering issue causing a random test failure
  (bsc#1125722)
- 4.1.55</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use /sbin/rpcinfo only, /usr/sbin/rpcinfo is gone (bsc#1127138).
- Use the correct path for /usr/bin/ifconfig (bsc#1127138).
- 4.1.56</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1551700800">- bnc#1127685
  - made Report module long message reporting popups adjustable
- 4.1.57</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787200">- Fixed a failing testsuite, the Report.LongError used in the
  global exception handler did not support the command line mode
  (related to bnc#1127685)
- 4.1.58</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551787201">- Added command line support also for the other Report module
  methods (related to bnc#1127685)
- 4.1.59</changelog>
  <changelog author="aschnell@suse.com" date="1551873600">- added "Modify" button label (related to bsc#1128279, or just as
  good gh#yast/yast-yast2#713)
- 4.1.60</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1552046400">- bnc#1127798
  - do not crash with internal error when enabling a network
    network service when no network service is active.
- 4.1.61</changelog>
  <changelog author="lslezak@suse.cz" date="1552392000">- Fixed product filtering in product_reader.rb, fixes problem
  when upgrading SLE15-SP1 to SLE15-SP1 (usually used to fix
  a broken system) (bsc#1128459)
- 4.1.62</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552478400">- Fix how a product features is read in a running system.
- Update default path for base product licenses
  (fate#324053, jsc#SLE-4173).
- 4.1.63</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552478401">- Process the "specialproduct" value like a linuxrc parameter
  (ignore "-_." characters, ignore case) (bsc#1128901)
- 4.1.64</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552564800">- Fixed evaluating the base product, the same products with
  the available and selected status must be treated as duplicate
  products (bsc#1129257)
- 4.1.65</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552996800">- Require tar as a dependency for yast2-logs (bsc#1125142).
- 4.1.66</changelog>
  <changelog author="kanderssen@suse.com" date="1553601600">- Firewall: Zone name has been removed from the common attributes
  declaration as it cannot be modified through the firewalld API.
  (bsc#1130354)
- 4.1.67</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Updated map for evaluating upgraded products
  (e.g. for SUSE-Manager). (bsc#1131503)
- Upgrade: Evaluating product obsoletes in order to show it in
  the proposal overview.
- 4.1.68</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.69</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1558008000">- Make sure the wizard buttons always remain visible in NCurses
  (bsc#1133367)
- 4.1.70</changelog>
  <changelog author="schubi@suse.de" date="1560859200">- Slideshow: Flag for switching on/off release notes tab.
  (bsc#1136708)
- 4.1.71</changelog>
  <changelog author="mvidner@suse.com" date="1560945600">- Stop "ls: write error: Broken pipe" messages (bsc#1128032)
- 4.1.72</changelog>
</package>
<package pkgid="6f41ffcc51cb4ea35740071f61559cb16c21f6b72b314f0e68ce1646f582221e" name="yast2-migration" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1438776000">- display a warning for repositories providing an obsolete product
  (FATE#319130)
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1439467200">- display a finish dialog at the very end, suggest rebooting the
  machine to activate the changes (new kernel, ...) (bsc#941625)
- 3.1.3</changelog>
  <changelog author="lslezak@suse.cz" date="1439553600">- ignore the installed products when searching for obsolete
  repositories (bsc#941532)
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1439899200">- restart YaST after upgrading the packages to avoid using the old
  (removed) files (bnc#942080)
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1439899201">- create a pair of "pre" and "post" filesystem snapshots (instead
  of a single snapshot) (bsc#942110)
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1439985600">- create the "post" snapshot after restart to avoid possible issues
  with fast_gettext (bnc#942080)
- 3.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1441108800">- disable "Back" at the initial dialog
- restore (enable) the Updates repositories at the end of the
  migration workflow (bsc#943960)
- 3.1.8</changelog>
  <changelog author="lslezak@suse.cz" date="1442232000">- add "important" flag to the snapshots created by the migration
  module (bsc#944019)
- disable the default snapshots created by the zypp plugin
  (bsc#944019)
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1442404800">- install package management patches at the beginning to ensure
  the latest migration packages are used (bsc#945032)
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1442923200">- rollback registration when migration is aborted after registering
  the migration products (FATE#315161)
- 3.1.10</changelog>
  <changelog author="lslezak@suse.cz" date="1443096000">- do not display the "success" dialog when the package installation
  is aborted (bsc#947416)
- 3.1.11</changelog>
  <changelog author="lslezak@suse.cz" date="1444132800">- display a hint to manually rollback the system when migration
  fails or is aborted during package installation (FATE#315161)
- 3.1.12</changelog>
  <changelog author="lslezak@suse.cz" date="1444305600">- fixed crash in the migration proposal (do not use "return"
  for returning the client result value) (bsc#949484)
- 3.1.13</changelog>
  <changelog author="stephan.barth@suse.com" date="1448539200">- Added Supplements for yast2-registration to ensure automatic installation
  (bsc#982150)
- 3.1.13.1</changelog>
  <changelog author="mfilka@suse.com" date="1496750400">- bnc#1040118
  - moved YCC laucher from "System" into "Software" group even in
    GTK
- 3.2.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1512648000">- Bump version to follow the new versioning guidelines
  (related to bsc#1071757).
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1539777600">- Added %license to spec file. Needed to build
  fix for bsc#1071757 again.
- 4.0.1</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1543492800">- Build fix, update unit tests related to the icon handling
  (boo#1109310)
- 4.1.1</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Fixes for the openSUSE Leap =&gt; SLES migration (jsc#SLE-7006)
  - Enable the openSUSE =&gt; SUSE vendor change
  - Disable all other repositories (esp. the default OSS and
    non-OSS repositories) which could collide with the new SLES
    repositories
- 4.1.2</changelog>
</package>
<package pkgid="bc516bdbadace259ddd8dbbbc5eba6d0cbeb4504db71f19d1f6e2400b6ad2933" name="yast2-migration" arch="src">
  <version epoch="0" ver="4.1.2" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1438776000">- display a warning for repositories providing an obsolete product
  (FATE#319130)
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1439467200">- display a finish dialog at the very end, suggest rebooting the
  machine to activate the changes (new kernel, ...) (bsc#941625)
- 3.1.3</changelog>
  <changelog author="lslezak@suse.cz" date="1439553600">- ignore the installed products when searching for obsolete
  repositories (bsc#941532)
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1439899200">- restart YaST after upgrading the packages to avoid using the old
  (removed) files (bnc#942080)
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1439899201">- create a pair of "pre" and "post" filesystem snapshots (instead
  of a single snapshot) (bsc#942110)
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1439985600">- create the "post" snapshot after restart to avoid possible issues
  with fast_gettext (bnc#942080)
- 3.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1441108800">- disable "Back" at the initial dialog
- restore (enable) the Updates repositories at the end of the
  migration workflow (bsc#943960)
- 3.1.8</changelog>
  <changelog author="lslezak@suse.cz" date="1442232000">- add "important" flag to the snapshots created by the migration
  module (bsc#944019)
- disable the default snapshots created by the zypp plugin
  (bsc#944019)
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1442404800">- install package management patches at the beginning to ensure
  the latest migration packages are used (bsc#945032)
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1442923200">- rollback registration when migration is aborted after registering
  the migration products (FATE#315161)
- 3.1.10</changelog>
  <changelog author="lslezak@suse.cz" date="1443096000">- do not display the "success" dialog when the package installation
  is aborted (bsc#947416)
- 3.1.11</changelog>
  <changelog author="lslezak@suse.cz" date="1444132800">- display a hint to manually rollback the system when migration
  fails or is aborted during package installation (FATE#315161)
- 3.1.12</changelog>
  <changelog author="lslezak@suse.cz" date="1444305600">- fixed crash in the migration proposal (do not use "return"
  for returning the client result value) (bsc#949484)
- 3.1.13</changelog>
  <changelog author="stephan.barth@suse.com" date="1448539200">- Added Supplements for yast2-registration to ensure automatic installation
  (bsc#982150)
- 3.1.13.1</changelog>
  <changelog author="mfilka@suse.com" date="1496750400">- bnc#1040118
  - moved YCC laucher from "System" into "Software" group even in
    GTK
- 3.2.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1512648000">- Bump version to follow the new versioning guidelines
  (related to bsc#1071757).
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1539777600">- Added %license to spec file. Needed to build
  fix for bsc#1071757 again.
- 4.0.1</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1543492800">- Build fix, update unit tests related to the icon handling
  (boo#1109310)
- 4.1.1</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Fixes for the openSUSE Leap =&gt; SLES migration (jsc#SLE-7006)
  - Enable the openSUSE =&gt; SUSE vendor change
  - Disable all other repositories (esp. the default OSS and
    non-OSS repositories) which could collide with the new SLES
    repositories
- 4.1.2</changelog>
</package>
<package pkgid="93ca8b7ad19c3a0218b64620eb9eeb05a61d6e67df09d6b80946aaa748622b5d" name="yast2-network" arch="noarch">
  <version epoch="0" ver="4.1.51" rel="lp151.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1547812800">- bnc#1122307
  - do not crash with internal error when adding new device
- 4.1.32</changelog>
  <changelog author="mfilka@suse.com" date="1548158400">- bnc#1122517
  - do not crash with internal error when cloning /etc/hosts
- 4.1.33</changelog>
  <changelog author="mfilka@suse.com" date="1548244800">- bnc#1122387
  - do not crash with internal error when modifying /etc/hosts
- 4.1.34</changelog>
  <changelog author="knut.anderssen@suse.com" date="1548417600">- bsc#112952
  - Try to install the wireless-tools package when the package is
    not installed and the wifi networks are scanned.
- 4.1.35</changelog>
  <changelog author="mfilka@suse.com" date="1548763200">- bnc#1123102
  - do not crash with internal error when no hostname is set when
    submitting device with static configuration
- 4.1.36</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549454400">- bsc#1124002
  - do not crash when cloning and trying to read a device protocol
    or portname.
- 4.1.37</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- fate#324662
  - Drop SuSEFirewall2 code completely.
  - Permits to choose not only default firewalld zones but also
    custom ones.
  - Allow the user to select the "DEFAULT" zone or disable the
    interface zone mapping through ifcfg files per interface.
- 4.1.38</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- AutoYaST in running system: Do not reset /etc/hosts (bsc#1122658)
- 4.1.39</changelog>
  <changelog author="knut.anderssen@suse.com" date="1550577600">- Installation proposal (bsc#1124478, bsc#1124498):
  - Do not offer NetworkManager when the package is not available
  - Respect the network backend selected in the proposal at the end
    of the installation
  - Removed the hostname write (127.0.0.2) from the summary
- 4.1.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1550750400">- When renaming an interface (bsc#1060207):
  - Offer to the user the option to update device routes that
    belongs to the previous interface name.
  - Update the Routing devices list with the new one when needed.
- Do not drop configured elements from the list when canceling
  an edition (bsc#998540)
- 4.1.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1551268800">- Installation proposal (bsc#1127228, bsc#1124478, bsc#1124498):
  - Fixed issue refreshing the list of packages needed for the
    default backend the first time the proposal is called.
  - Do not cache the default network backend but only the current
    one when modified by the user in the proposal
  - Fallback to :wicked when saving the network if NetworkManager
    is selected as the service to be used but not installed.
- 4.1.42</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006 and gh#yast/yast-ruby-bindings#228)
- 4.1.43</changelog>
  <changelog author="knut.anderssen@suse.com" date="1553169600">- bnc#1094934
  - Fixed internal error when writing remote configuration by
    cmdline (yast remote allow set=yes).
- 4.1.44</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1555934400">- Fix mode/second_stage value initialization (bsc#1132057)
- 4.1.45</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1556884800">- bnc#1131588
  - display a confirmation popup when static route is going to be
    removed when switching a device to dhcp
- bnc#1129012 (knut.anderssen@suse.com)
  - AY: Use the bus_id of the udev parent device when using virtio
    netcards and matching the existent rules with the defined in
    in the profile.
- Showing correct start mode for nfsroot device (bsc#1105692).
  (schubi@suse.de)
- 4.1.46</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560254400">- boo#903889
  - When proposing a bridge configuration for virtualization, move
    the routes from the enslaved interface to the new bridge.
- 4.1.47</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560340800">- bsc#1136929
  - Use the hwinfo permanent mac address instead of the current mac
    which could be wrong in case of an enslaved interface.
- bsc#1137324
  - Do not create duplicate udev rule attributes when editing an
    interface name.
- 4.1.48</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560513600">- boo#1138297
  - Improve some mocking in NetworkService.activate_network_service
    unit test which caused some test to fail randomly.
- 4.1.49</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1562155200">- bsc#1137346
  - CLI: Report an error instead of raising an exception when the
    device type is not provided and there is no way to infer it
    from the given options.
- 4.1.50</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1562155201">- The 'lan' client returns the correct value (bsc#1140199).
- 4.1.51</changelog>
</package>
<package pkgid="53740c63db97a247dec05e3cf20640f38547a6ce1b7dfc6acd4de954cb6025e6" name="yast2-network" arch="src">
  <version epoch="0" ver="4.1.51" rel="lp151.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1547812800">- bnc#1122307
  - do not crash with internal error when adding new device
- 4.1.32</changelog>
  <changelog author="mfilka@suse.com" date="1548158400">- bnc#1122517
  - do not crash with internal error when cloning /etc/hosts
- 4.1.33</changelog>
  <changelog author="mfilka@suse.com" date="1548244800">- bnc#1122387
  - do not crash with internal error when modifying /etc/hosts
- 4.1.34</changelog>
  <changelog author="knut.anderssen@suse.com" date="1548417600">- bsc#112952
  - Try to install the wireless-tools package when the package is
    not installed and the wifi networks are scanned.
- 4.1.35</changelog>
  <changelog author="mfilka@suse.com" date="1548763200">- bnc#1123102
  - do not crash with internal error when no hostname is set when
    submitting device with static configuration
- 4.1.36</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549454400">- bsc#1124002
  - do not crash when cloning and trying to read a device protocol
    or portname.
- 4.1.37</changelog>
  <changelog author="knut.anderssen@suse.com" date="1549540800">- fate#324662
  - Drop SuSEFirewall2 code completely.
  - Permits to choose not only default firewalld zones but also
    custom ones.
  - Allow the user to select the "DEFAULT" zone or disable the
    interface zone mapping through ifcfg files per interface.
- 4.1.38</changelog>
  <changelog author="schubi@suse.de" date="1549972800">- AutoYaST in running system: Do not reset /etc/hosts (bsc#1122658)
- 4.1.39</changelog>
  <changelog author="knut.anderssen@suse.com" date="1550577600">- Installation proposal (bsc#1124478, bsc#1124498):
  - Do not offer NetworkManager when the package is not available
  - Respect the network backend selected in the proposal at the end
    of the installation
  - Removed the hostname write (127.0.0.2) from the summary
- 4.1.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1550750400">- When renaming an interface (bsc#1060207):
  - Offer to the user the option to update device routes that
    belongs to the previous interface name.
  - Update the Routing devices list with the new one when needed.
- Do not drop configured elements from the list when canceling
  an edition (bsc#998540)
- 4.1.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1551268800">- Installation proposal (bsc#1127228, bsc#1124478, bsc#1124498):
  - Fixed issue refreshing the list of packages needed for the
    default backend the first time the proposal is called.
  - Do not cache the default network backend but only the current
    one when modified by the user in the proposal
  - Fallback to :wicked when saving the network if NetworkManager
    is selected as the service to be used but not installed.
- 4.1.42</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006 and gh#yast/yast-ruby-bindings#228)
- 4.1.43</changelog>
  <changelog author="knut.anderssen@suse.com" date="1553169600">- bnc#1094934
  - Fixed internal error when writing remote configuration by
    cmdline (yast remote allow set=yes).
- 4.1.44</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1555934400">- Fix mode/second_stage value initialization (bsc#1132057)
- 4.1.45</changelog>
  <changelog author="Michal Filka &lt;mfilka@suse.com&gt;" date="1556884800">- bnc#1131588
  - display a confirmation popup when static route is going to be
    removed when switching a device to dhcp
- bnc#1129012 (knut.anderssen@suse.com)
  - AY: Use the bus_id of the udev parent device when using virtio
    netcards and matching the existent rules with the defined in
    in the profile.
- Showing correct start mode for nfsroot device (bsc#1105692).
  (schubi@suse.de)
- 4.1.46</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560254400">- boo#903889
  - When proposing a bridge configuration for virtualization, move
    the routes from the enslaved interface to the new bridge.
- 4.1.47</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560340800">- bsc#1136929
  - Use the hwinfo permanent mac address instead of the current mac
    which could be wrong in case of an enslaved interface.
- bsc#1137324
  - Do not create duplicate udev rule attributes when editing an
    interface name.
- 4.1.48</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1560513600">- boo#1138297
  - Improve some mocking in NetworkService.activate_network_service
    unit test which caused some test to fail randomly.
- 4.1.49</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1562155200">- bsc#1137346
  - CLI: Report an error instead of raising an exception when the
    device type is not provided and there is no way to infer it
    from the given options.
- 4.1.50</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1562155201">- The 'lan' client returns the correct value (bsc#1140199).
- 4.1.51</changelog>
</package>
<package pkgid="40cf56af57b8c1c496ad88225488b9fd7b83b39f96c39196034ce05adc16089f" name="yast2-ntp-client" arch="noarch">
  <version epoch="0" ver="4.1.9" rel="lp151.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1513166400">- Do minimal modification to default chrony.conf in autoyast
  when chrony is not specified explicitly in packages section of
  profile (bsc#1072595)
- 4.0.6</changelog>
  <changelog author="jreidinger@suse.com" date="1517572800">- set properly range for sync interval (bsc#1079117)
- Mention proper configuration file when write failed (bsc#1079120)
- validate pool address (bsc#1079120)
- 4.0.7</changelog>
  <changelog author="gsouza@suse.com" date="1519300800">- Inform user when client cannot sync with NTP server after the
  user clik on "sync time now" (bsc#1081000)
- 4.0.8</changelog>
  <changelog author="jreidinger@suse.com" date="1520424000">- change cron config file name to suse-ntp_synchronize
  (bsc#1079122)
- convert old file to new one during upgrade, ensure that ntpd is
  replaced by chrony (FATE#323432)
- ghost that config file, so it is easy to find which package owns
  it
- 4.0.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element or 'ntp_server' and
  allowed to be an empty list in the AutoYaST schema (bsc#1013047)
- 4.0.10</changelog>
  <changelog author="schubi@suse.de" date="1523620800">- Improved robustness if chrony has not been installed.
  (bnc#1072345, bnc#1061035)
- 4.0.11</changelog>
  <changelog author="schubi@suse.de" date="1524139200">- Fix in checking installed chrony package while writing ntp
  settings. (bnc#1089962)
- 4.0.12</changelog>
  <changelog author="jreidinger@suse.com" date="1534766400">- Properly disable cron service when running systemd service when
  called from Date and Time module (bsc#1102983)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1534852800">- Changed dir of COPYING file.</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="dgonzalez@suse.com" date="1536321600">- Save the service status according to the user preferences
  (bsc#1075039)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538568000">- AutoYaST: Do not show the progress when merging the configuration
  before writing it (bsc#1110598)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed license path. Build error for bsc#1110598.
- 4.1.3</changelog>
  <changelog author="knut.andersse@suse.com" date="1541678400">- Only write the configuration once, and do not save changes when
  we are only synchronizing the date. (bsc#1108497)
- 4.1.4</changelog>
  <changelog author="knut.andersse@suse.com" date="1541678401">- fate#323454
  - Bring back the menu button for choosing an NTP address from a
    public NTP servers list or from the ones returned by DHCP.
  - When no configuration is proposed by default, then use the DHCP
    offered servers as fallback.
- Do not synchronize if chronyd service is running (bsc#1087048)
- Use the title style capitalization in "Synchronize Now" button
  (bsc#1039987)
- 4.1.5</changelog>
  <changelog author="knut.andersse@suse.com" date="1542196800">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="ancor@suse.com" date="1552996800">- Activate translations for the SelectFrom widget (bsc#1126523,
  bsc#1126520).
- 4.1.8</changelog>
  <changelog author="knut.anderssen@suse.com" date="1562241600">- Added cwm/popup dependency (bsc#893065, bsc#1039985)</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1562241601">- Fix 'ntp-client' behaviour when running in firstboot
  (bsc#1140199).
- 4.1.9</changelog>
</package>
<package pkgid="b47c2dc607fea5ee231a70e425f94504333609f0c217765fdc86a2751ae52036" name="yast2-ntp-client" arch="src">
  <version epoch="0" ver="4.1.9" rel="lp151.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1513166400">- Do minimal modification to default chrony.conf in autoyast
  when chrony is not specified explicitly in packages section of
  profile (bsc#1072595)
- 4.0.6</changelog>
  <changelog author="jreidinger@suse.com" date="1517572800">- set properly range for sync interval (bsc#1079117)
- Mention proper configuration file when write failed (bsc#1079120)
- validate pool address (bsc#1079120)
- 4.0.7</changelog>
  <changelog author="gsouza@suse.com" date="1519300800">- Inform user when client cannot sync with NTP server after the
  user clik on "sync time now" (bsc#1081000)
- 4.0.8</changelog>
  <changelog author="jreidinger@suse.com" date="1520424000">- change cron config file name to suse-ntp_synchronize
  (bsc#1079122)
- convert old file to new one during upgrade, ensure that ntpd is
  replaced by chrony (FATE#323432)
- ghost that config file, so it is easy to find which package owns
  it
- 4.0.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element or 'ntp_server' and
  allowed to be an empty list in the AutoYaST schema (bsc#1013047)
- 4.0.10</changelog>
  <changelog author="schubi@suse.de" date="1523620800">- Improved robustness if chrony has not been installed.
  (bnc#1072345, bnc#1061035)
- 4.0.11</changelog>
  <changelog author="schubi@suse.de" date="1524139200">- Fix in checking installed chrony package while writing ntp
  settings. (bnc#1089962)
- 4.0.12</changelog>
  <changelog author="jreidinger@suse.com" date="1534766400">- Properly disable cron service when running systemd service when
  called from Date and Time module (bsc#1102983)
- 4.1.0</changelog>
  <changelog author="schubi@suse.de" date="1534852800">- Changed dir of COPYING file.</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="dgonzalez@suse.com" date="1536321600">- Save the service status according to the user preferences
  (bsc#1075039)
- 4.1.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538568000">- AutoYaST: Do not show the progress when merging the configuration
  before writing it (bsc#1110598)
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Fixed license path. Build error for bsc#1110598.
- 4.1.3</changelog>
  <changelog author="knut.andersse@suse.com" date="1541678400">- Only write the configuration once, and do not save changes when
  we are only synchronizing the date. (bsc#1108497)
- 4.1.4</changelog>
  <changelog author="knut.andersse@suse.com" date="1541678401">- fate#323454
  - Bring back the menu button for choosing an NTP address from a
    public NTP servers list or from the ones returned by DHCP.
  - When no configuration is proposed by default, then use the DHCP
    offered servers as fallback.
- Do not synchronize if chronyd service is running (bsc#1087048)
- Use the title style capitalization in "Synchronize Now" button
  (bsc#1039987)
- 4.1.5</changelog>
  <changelog author="knut.andersse@suse.com" date="1542196800">- Aligned "Synchronize Now" button and "NTP Server Address" box not
  breaking previous fix and not hiding the manual checkbox in
  TextMode (bnc#893065, bsc#1039985).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="ancor@suse.com" date="1552996800">- Activate translations for the SelectFrom widget (bsc#1126523,
  bsc#1126520).
- 4.1.8</changelog>
  <changelog author="knut.anderssen@suse.com" date="1562241600">- Added cwm/popup dependency (bsc#893065, bsc#1039985)</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1562241601">- Fix 'ntp-client' behaviour when running in firstboot
  (bsc#1140199).
- 4.1.9</changelog>
</package>
<package pkgid="62d9af8a6a777486c1b281dd6bf703c1a1dbeb4e8ce96b9eb5ed9e35516c9583" name="yast2-packager" arch="i586">
  <version epoch="0" ver="4.1.47" rel="lp151.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1550145600">- When patterns are missing, use 1 pop-up instead of many,
  and suggest to register or apply add-ons (bsc#1117535).
- 4.1.28</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use the correct path for /usr/bin/eject (bsc#1127138)
- 4.1.29</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1551700800">- fix showing help text for product license (bsc#1126491)
- 4.1.30</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1551873600">- Correct english wording for missing patterns (bsc#1117535).
- 4.1.31</changelog>
  <changelog author="schubi@suse.de" date="1551960000">- Bug fix: Changing repo URL has been ignored (bsc#1119564).
- 4.1.32</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- AutoYaST: Disabling local repositories in second stage only.
  (bsc#1127818)
- 4.1.33</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1553515200">- Use correct method name mount_path, not nonexistent mountpoint
  (bsc#1130287)
- 4.1.34</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1553601600">- Fix malformed rpm commands (bsc#1129422).
- 4.1.35</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Package proposal: Reset solver state before starting the next
  solver run (related to bsc#1077399).
- 4.1.36</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Update proposal: Showing product obsoletes. (bsc#1131503)
- 4.1.37</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Display human readable product names instead of the internal IDs
  when upgrading from SLES12 + SUMA Proxy + SUMA Branch Server
  (related to bsc#1133215)
- 4.1.38</changelog>
  <changelog author="mvidner@suse.com" date="1556798400">- Prefer control.xml to ProductFeatures for Community Repositories
  (bsc#1132613)
- 4.1.39</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557230400">- Properly handle going back when selecting the modules from the
  Packages DVD medium (bsc#1131968)
- 4.1.40</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557489600">- Increase the memory limit warning for the online repositories to
  1.5GiB to avoid freezing the installer (bsc#1132650)
- 4.1.41</changelog>
  <changelog author="schubi@suse.de" date="1557835200">- List of Online Repositories: Do not show already added repos.
  Replace $releasever by the current product version.
  (bsc#1132622)
- 4.1.42</changelog>
  <changelog author="schubi@suse.de" date="1558440000">- List of Online Repositories: Overwrite already existing repos in
  "new installation" mode (bsc#1132622).
- 4.1.43</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Define the openSUSE =&gt; SLES product migration to properly display
  the migration summary text (bsc#1136325)
- 4.1.44</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1560427200">- Allow to select the license language when running in textmode
  (bsc#1135901)
- 4.1.45</changelog>
  <changelog author="schubi@suse.de" date="1560772800">- Package installation: Rebuild slide show dialog and enable
  realease notes tab (bsc#1136708).
- 4.1.46</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1561032000">- Better handling of license agreement dialog, allowing to
  distinguish when the user is declining a license or aborting
  the installation (bsc#1114018)
- 4.1.47</changelog>
</package>
<package pkgid="a1618d057a242d9c6036a9850959e8ab85aacb5f759e13ecdb69baceda0da2de" name="yast2-packager" arch="src">
  <version epoch="0" ver="4.1.47" rel="lp151.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1550145600">- When patterns are missing, use 1 pop-up instead of many,
  and suggest to register or apply add-ons (bsc#1117535).
- 4.1.28</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use the correct path for /usr/bin/eject (bsc#1127138)
- 4.1.29</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1551700800">- fix showing help text for product license (bsc#1126491)
- 4.1.30</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1551873600">- Correct english wording for missing patterns (bsc#1117535).
- 4.1.31</changelog>
  <changelog author="schubi@suse.de" date="1551960000">- Bug fix: Changing repo URL has been ignored (bsc#1119564).
- 4.1.32</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- AutoYaST: Disabling local repositories in second stage only.
  (bsc#1127818)
- 4.1.33</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1553515200">- Use correct method name mount_path, not nonexistent mountpoint
  (bsc#1130287)
- 4.1.34</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1553601600">- Fix malformed rpm commands (bsc#1129422).
- 4.1.35</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Package proposal: Reset solver state before starting the next
  solver run (related to bsc#1077399).
- 4.1.36</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Update proposal: Showing product obsoletes. (bsc#1131503)
- 4.1.37</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Display human readable product names instead of the internal IDs
  when upgrading from SLES12 + SUMA Proxy + SUMA Branch Server
  (related to bsc#1133215)
- 4.1.38</changelog>
  <changelog author="mvidner@suse.com" date="1556798400">- Prefer control.xml to ProductFeatures for Community Repositories
  (bsc#1132613)
- 4.1.39</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557230400">- Properly handle going back when selecting the modules from the
  Packages DVD medium (bsc#1131968)
- 4.1.40</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557489600">- Increase the memory limit warning for the online repositories to
  1.5GiB to avoid freezing the installer (bsc#1132650)
- 4.1.41</changelog>
  <changelog author="schubi@suse.de" date="1557835200">- List of Online Repositories: Do not show already added repos.
  Replace $releasever by the current product version.
  (bsc#1132622)
- 4.1.42</changelog>
  <changelog author="schubi@suse.de" date="1558440000">- List of Online Repositories: Overwrite already existing repos in
  "new installation" mode (bsc#1132622).
- 4.1.43</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Define the openSUSE =&gt; SLES product migration to properly display
  the migration summary text (bsc#1136325)
- 4.1.44</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1560427200">- Allow to select the license language when running in textmode
  (bsc#1135901)
- 4.1.45</changelog>
  <changelog author="schubi@suse.de" date="1560772800">- Package installation: Rebuild slide show dialog and enable
  realease notes tab (bsc#1136708).
- 4.1.46</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1561032000">- Better handling of license agreement dialog, allowing to
  distinguish when the user is declining a license or aborting
  the installation (bsc#1114018)
- 4.1.47</changelog>
</package>
<package pkgid="3d1abbb8d0ad986bc4b10f3edcab49f5aa70146ce464251f0e77d0c95c246b28" name="yast2-packager" arch="x86_64">
  <version epoch="0" ver="4.1.47" rel="lp151.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1550145600">- When patterns are missing, use 1 pop-up instead of many,
  and suggest to register or apply add-ons (bsc#1117535).
- 4.1.28</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Use the correct path for /usr/bin/eject (bsc#1127138)
- 4.1.29</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1551700800">- fix showing help text for product license (bsc#1126491)
- 4.1.30</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1551873600">- Correct english wording for missing patterns (bsc#1117535).
- 4.1.31</changelog>
  <changelog author="schubi@suse.de" date="1551960000">- Bug fix: Changing repo URL has been ignored (bsc#1119564).
- 4.1.32</changelog>
  <changelog author="schubi@suse.de" date="1552651200">- AutoYaST: Disabling local repositories in second stage only.
  (bsc#1127818)
- 4.1.33</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1553515200">- Use correct method name mount_path, not nonexistent mountpoint
  (bsc#1130287)
- 4.1.34</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1553601600">- Fix malformed rpm commands (bsc#1129422).
- 4.1.35</changelog>
  <changelog author="schubi@suse.de" date="1554292800">- Package proposal: Reset solver state before starting the next
  solver run (related to bsc#1077399).
- 4.1.36</changelog>
  <changelog author="schubi@suse.de" date="1554811200">- Update proposal: Showing product obsoletes. (bsc#1131503)
- 4.1.37</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Display human readable product names instead of the internal IDs
  when upgrading from SLES12 + SUMA Proxy + SUMA Branch Server
  (related to bsc#1133215)
- 4.1.38</changelog>
  <changelog author="mvidner@suse.com" date="1556798400">- Prefer control.xml to ProductFeatures for Community Repositories
  (bsc#1132613)
- 4.1.39</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557230400">- Properly handle going back when selecting the modules from the
  Packages DVD medium (bsc#1131968)
- 4.1.40</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1557489600">- Increase the memory limit warning for the online repositories to
  1.5GiB to avoid freezing the installer (bsc#1132650)
- 4.1.41</changelog>
  <changelog author="schubi@suse.de" date="1557835200">- List of Online Repositories: Do not show already added repos.
  Replace $releasever by the current product version.
  (bsc#1132622)
- 4.1.42</changelog>
  <changelog author="schubi@suse.de" date="1558440000">- List of Online Repositories: Overwrite already existing repos in
  "new installation" mode (bsc#1132622).
- 4.1.43</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Define the openSUSE =&gt; SLES product migration to properly display
  the migration summary text (bsc#1136325)
- 4.1.44</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1560427200">- Allow to select the license language when running in textmode
  (bsc#1135901)
- 4.1.45</changelog>
  <changelog author="schubi@suse.de" date="1560772800">- Package installation: Rebuild slide show dialog and enable
  realease notes tab (bsc#1136708).
- 4.1.46</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1561032000">- Better handling of license agreement dialog, allowing to
  distinguish when the user is declining a license or aborting
  the installation (bsc#1114018)
- 4.1.47</changelog>
</package>
<package pkgid="3dfd53dc5063528554d1927670707fc2fc484145e46c5892d0a07b97874e3297" name="yast2-registration" arch="noarch">
  <version epoch="0" ver="4.1.22" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1539259200">- CRLF control characters cannot be included in the registration
  code, added validation check (bsc#1111419)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539345600">- Added tags full_system_media_name and full_system_download_url
  in control.xml which describe the location for the
  "all-packages" medium. This information will be shown if the
  registration has been scipped by the user. No hint will be shown
  if these tags have not been defined. (fate#325834)
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="dgonzalez@suse.com" date="1541505600">- Do not display a connection error when automatically trying to
  use the base product registration code for the extensions
  (bsc#1091825).
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1542628800">- Improved error messages (bsc#1060151).
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542801600">- Do not allow redirection while checking via HTTP request if
  (old) NCC API is present at the server (bsc#1111404).
- 4.1.8</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed UI display issue in the installation workflow
  (not cleared screen) (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="jlopez@suse.com" date="1544788801">- Hardening commands execution (part of bsc#1118291).
- Replace backticks by Yast::Execute.
- 4.1.11</changelog>
  <changelog author="lslezak@suse.cz" date="1547121600">- Properly restart the package management to avoid using a possibly
  outdated configuration (related to bsc#1120568)
- 4.1.12</changelog>
  <changelog author="lslezak@suse.cz" date="1547640000">- Do not crash when no base product to register is found
  (bsc#1122011)
- 4.1.13</changelog>
  <changelog author="lslezak@suse.cz" date="1547726400">- Save the current repository configuration so it is properly
  restored after restarting the package manager (bsc#1122011)
- 4.1.14</changelog>
  <changelog author="schubi@suse.de" date="1548417600">- Do not try to remove services which have already been deleted.
  (bsc#1110246)
- 4.1.15</changelog>
  <changelog author="lslezak@suse.cz" date="1549022400">- Improved the message in the registration skipping dialog
  (bsc#1122608)
- 4.1.16</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed "can't modify frozen String" crash (bsc#1125006)
- 4.1.17</changelog>
  <changelog author="lslezak@suse.cz" date="1551096000">- Better handle the SSL certificates signed by an uknown CA
  (bsc#1124992)
  - Display details in a scrollable widget
  - Display hints how to install the certificate manually
- 4.1.18</changelog>
  <changelog author="lslezak@suse.cz" date="1551441600">- Skip SLP discovery when going back after registering the system,
  the server cannot be changed anyway (related to bsc#1071887)
- 4.1.19</changelog>
  <changelog author="knut.anderssen@suse.com" date="1552219200">- Permit to retry the registration in case of a timeout or a json
  parse error and hide the error details which will be accesible
  through the 'details' button (bsc#1058375, bsc#1126045).
- 4.1.20</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552651200">- Run the solver to correctly initialize the product statuses
  (fixes displaying SUMA RN during a SLES upgrade) (bsc#1129029)
- 4.1.21</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Properly display the openSUSE Leap to SLES migration summary
  (bsc#1136325)
- 4.1.22</changelog>
</package>
<package pkgid="643c791163dc55596330e6cb01ec8cc843f0ca67653ca6b804c0049b34898b1b" name="yast2-registration" arch="src">
  <version epoch="0" ver="4.1.22" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1539259200">- CRLF control characters cannot be included in the registration
  code, added validation check (bsc#1111419)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539345600">- Added tags full_system_media_name and full_system_download_url
  in control.xml which describe the location for the
  "all-packages" medium. This information will be shown if the
  registration has been scipped by the user. No hint will be shown
  if these tags have not been defined. (fate#325834)
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="dgonzalez@suse.com" date="1541505600">- Do not display a connection error when automatically trying to
  use the base product registration code for the extensions
  (bsc#1091825).
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1542628800">- Improved error messages (bsc#1060151).
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1542801600">- Do not allow redirection while checking via HTTP request if
  (old) NCC API is present at the server (bsc#1111404).
- 4.1.8</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1544788800">- Fixed UI display issue in the installation workflow
  (not cleared screen) (bsc#1117492)
- 4.1.10</changelog>
  <changelog author="jlopez@suse.com" date="1544788801">- Hardening commands execution (part of bsc#1118291).
- Replace backticks by Yast::Execute.
- 4.1.11</changelog>
  <changelog author="lslezak@suse.cz" date="1547121600">- Properly restart the package management to avoid using a possibly
  outdated configuration (related to bsc#1120568)
- 4.1.12</changelog>
  <changelog author="lslezak@suse.cz" date="1547640000">- Do not crash when no base product to register is found
  (bsc#1122011)
- 4.1.13</changelog>
  <changelog author="lslezak@suse.cz" date="1547726400">- Save the current repository configuration so it is properly
  restored after restarting the package manager (bsc#1122011)
- 4.1.14</changelog>
  <changelog author="schubi@suse.de" date="1548417600">- Do not try to remove services which have already been deleted.
  (bsc#1110246)
- 4.1.15</changelog>
  <changelog author="lslezak@suse.cz" date="1549022400">- Improved the message in the registration skipping dialog
  (bsc#1122608)
- 4.1.16</changelog>
  <changelog author="lslezak@suse.cz" date="1550491200">- Fixed "can't modify frozen String" crash (bsc#1125006)
- 4.1.17</changelog>
  <changelog author="lslezak@suse.cz" date="1551096000">- Better handle the SSL certificates signed by an uknown CA
  (bsc#1124992)
  - Display details in a scrollable widget
  - Display hints how to install the certificate manually
- 4.1.18</changelog>
  <changelog author="lslezak@suse.cz" date="1551441600">- Skip SLP discovery when going back after registering the system,
  the server cannot be changed anyway (related to bsc#1071887)
- 4.1.19</changelog>
  <changelog author="knut.anderssen@suse.com" date="1552219200">- Permit to retry the registration in case of a timeout or a json
  parse error and hide the error details which will be accesible
  through the 'details' button (bsc#1058375, bsc#1126045).
- 4.1.20</changelog>
  <changelog author="Ladislav Slezak &lt;lslezak@suse.cz&gt;" date="1552651200">- Run the solver to correctly initialize the product statuses
  (fixes displaying SUMA RN during a SLES upgrade) (bsc#1129029)
- 4.1.21</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1559217600">- Properly display the openSUSE Leap to SLES migration summary
  (bsc#1136325)
- 4.1.22</changelog>
</package>
<package pkgid="d1f00449c71293bb6dffed80706d95c4ff6014ec1e198d16f5b2be406bc801d3" name="yast2-schema" arch="src">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1472126400">- Exclude i586 and s390 architectures as SLE 12 does not build
  a runnable kernel for such architectures (bsc#933411).
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1478260800">- Add support to enable copy-on-write for Btrfs subvolumes
  (FATE#320342)
- Add support to omit the Btrfs default subvolume name
  (FATE#317775)
- Add support to define SSH authorized_keys (FATE#319471)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518177600">- Drop yast2-inetd (fate#323373)
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1518436800">- drop yast2-ca-management (fate#319119)
- 4.0.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522756800">- Fix several validation problems (bsc#1013047)
- 4.0.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527076800">- Add create_subvolumes element (bsc#1094307)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="schubi@suse.de" date="1542888000">- AutoYaST schema changed in yast2-firewall (4.0.28).
  - Allowed the new 'description', 'short' and 'target' elements in
    zone entries (bsc#1108199)
- 4.0.4</changelog>
  <changelog author="schubi@suse.de" date="1543492800">- yast2-firstboot change: Added firstboot.rnc file to desktop file.
  (bsc#1117068)
- 4.0.5</changelog>
  <changelog author="schubi@suse.de" date="1543579200">- Evaluating which package belongs to which schema. This
  information will be stored in includes.rnc (bsc#1117068)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1545998400">- Added new schema of yast2-tftp-server module (bsc#1108199).
- 4.0.7</changelog>
  <changelog author="knut.anderssen@suse.com" date="1546948800">- AutoYaST schema changed in yast2-firewall (4.1.4).
  - Allowed the new 'forward_ports', 'rich_rules' and
    'source_ports' elements in zone entries (bsc#1108199)
- 4.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1547640000">- AutoYaST schema changed in yast2-firewall (4.1.8).
  - Dropped unused elements that were not in GA and are not needed in
    SP1 (fate#324662)
- 4.1.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1548763200">- Add dependency on yast2-configuration-management (fate#322722).
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1549281600">- Added yast2-tftp-server for autobuild (bsc#1123830).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552305600">- Updated build requ. due tag home_btrfs_subvolume and smt.
  (bsc#1128707)
- 4.1.4</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552564800">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1553515200">- Updated build requ. due tag smt in bootloader (bsc#1128707).
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1557230400">- Updated build requ. due tag cpu_mitigations in bootloader.
  (bsc#1128707).
- 4.1.7</changelog>
</package>
<package pkgid="c0a04a79a68cbc3849b234ec08e5dcbcea4c850d541db6185b1b6a3ff6d0e52b" name="yast2-schema" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="lp151.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1472126400">- Exclude i586 and s390 architectures as SLE 12 does not build
  a runnable kernel for such architectures (bsc#933411).
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1478260800">- Add support to enable copy-on-write for Btrfs subvolumes
  (FATE#320342)
- Add support to omit the Btrfs default subvolume name
  (FATE#317775)
- Add support to define SSH authorized_keys (FATE#319471)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518177600">- Drop yast2-inetd (fate#323373)
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1518436800">- drop yast2-ca-management (fate#319119)
- 4.0.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522756800">- Fix several validation problems (bsc#1013047)
- 4.0.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527076800">- Add create_subvolumes element (bsc#1094307)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="schubi@suse.de" date="1542888000">- AutoYaST schema changed in yast2-firewall (4.0.28).
  - Allowed the new 'description', 'short' and 'target' elements in
    zone entries (bsc#1108199)
- 4.0.4</changelog>
  <changelog author="schubi@suse.de" date="1543492800">- yast2-firstboot change: Added firstboot.rnc file to desktop file.
  (bsc#1117068)
- 4.0.5</changelog>
  <changelog author="schubi@suse.de" date="1543579200">- Evaluating which package belongs to which schema. This
  information will be stored in includes.rnc (bsc#1117068)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1545998400">- Added new schema of yast2-tftp-server module (bsc#1108199).
- 4.0.7</changelog>
  <changelog author="knut.anderssen@suse.com" date="1546948800">- AutoYaST schema changed in yast2-firewall (4.1.4).
  - Allowed the new 'forward_ports', 'rich_rules' and
    'source_ports' elements in zone entries (bsc#1108199)
- 4.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1547640000">- AutoYaST schema changed in yast2-firewall (4.1.8).
  - Dropped unused elements that were not in GA and are not needed in
    SP1 (fate#324662)
- 4.1.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1548763200">- Add dependency on yast2-configuration-management (fate#322722).
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1549281600">- Added yast2-tftp-server for autobuild (bsc#1123830).
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1552305600">- Updated build requ. due tag home_btrfs_subvolume and smt.
  (bsc#1128707)
- 4.1.4</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552564800">- Add Bcache related elements to the partitioning schema
  (fate#325346).
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1553515200">- Updated build requ. due tag smt in bootloader (bsc#1128707).
- 4.1.6</changelog>
  <changelog author="schubi@suse.de" date="1557230400">- Updated build requ. due tag cpu_mitigations in bootloader.
  (bsc#1128707).
- 4.1.7</changelog>
</package>
<package pkgid="9ca6de2d96ee3f024f6ae31a0e2770725bb9abcbc38e7852f6f05c105d0da92c" name="yast2-storage-ng" arch="i586">
  <version epoch="0" ver="4.1.84" rel="lp151.2.3.1"/>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1550836800">- Partitioner: improve "Import Mount Points" feature.
  Now, a fstab entry cannot be imported when the filesystem type
  is not supported. Moreover, the "mount by" type is assigned
  according to the fstab entry and the label of the previous
  filesystem is preserved (bsc#1103391).
- 4.1.67</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
</package>
<package pkgid="e617379a3e6ae1239e00ecb2a9378c5a699e1d8815d549c455473ae74fcc906e" name="yast2-storage-ng" arch="src">
  <version epoch="0" ver="4.1.84" rel="lp151.2.3.1"/>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1550836800">- Partitioner: improve "Import Mount Points" feature.
  Now, a fstab entry cannot be imported when the filesystem type
  is not supported. Moreover, the "mount by" type is assigned
  according to the fstab entry and the label of the previous
  filesystem is preserved (bsc#1103391).
- 4.1.67</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
</package>
<package pkgid="a956119098c263f450717664bbbadbb5585f7d5c8d4b7886222cafd7fc6da86e" name="yast2-storage-ng" arch="x86_64">
  <version epoch="0" ver="4.1.84" rel="lp151.2.3.1"/>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1550836800">- Partitioner: improve "Import Mount Points" feature.
  Now, a fstab entry cannot be imported when the filesystem type
  is not supported. Moreover, the "mount by" type is assigned
  according to the fstab entry and the label of the previous
  filesystem is preserved (bsc#1103391).
- 4.1.67</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
</package>
<package pkgid="da0af631dc35a48c1a9b146c3543b025ceb474885f70a27ae0c92b6d67f11923" name="yast2-storage-ng" arch="i586">
  <version epoch="0" ver="4.1.85" rel="lp151.2.6.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1562673600">- AutoYaST: Fixed typo in filesystem type that caused a crash
  (bsc#1136272)
- 4.1.85</changelog>
</package>
<package pkgid="80a03f54636cfd6d39817c45e75d053f8aebab13e07874b5943e7777de073a02" name="yast2-storage-ng" arch="src">
  <version epoch="0" ver="4.1.85" rel="lp151.2.6.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1562673600">- AutoYaST: Fixed typo in filesystem type that caused a crash
  (bsc#1136272)
- 4.1.85</changelog>
</package>
<package pkgid="2af40aa4ff8c4c7d574791c476e84504874ba52fde964417cbdb25b6ac34af0a" name="yast2-storage-ng" arch="x86_64">
  <version epoch="0" ver="4.1.85" rel="lp151.2.6.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551268800">- Do not export the partition_type attribute when it belongs to a
  GPT partition table (bsc#1115751).</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551355200">- Do not crash when using an old MD RAID schema and the
  partition_nr attribute is missing. Instead, do not allow to
  continue because a missing value issue (bsc#1126059).
- 4.1.68</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1551700800">- Translates the filesystem roles properly (bsc#1127756).
- 4.1.69</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1551873600">- Fixed "can't modify frozen String" crashes (related to
  bsc#1125006)
- Fixed missing translation (bsc#1127181)
- 4.1.70</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1551873601">- Prevent crash if resizing a newly formatted filesystem (bsc#1124146)
- 4.1.71</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1552305600">- Only exports the partition_type attribute when it belongs to a
  partition table with support for extended partitions
  (bsc#1115751).</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552392000">- Add support for Bcache to AutoYaST (fate#325346).
- Fix reuse of RAID partitions for LVM volume groups and bcache
  devices.
- 4.1.72</changelog>
  <changelog author="schubi@suse.de" date="1552478400">- Unifying name Bcache/bcache to bcache (fate#325346).
- 4.1.73</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1552478401">- Show new icons for the options of the Configure menu button
  (related to bsc#1122174).
- 4.1.74</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1552910400">- Fix bcache and AutoYaST related tests (related to fate#325346).
- 4.1.75</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553515200">- Fix boot disk detection (bsc#1129787).
- 4.1.76</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1553601600">- Improve unit tests: mocking architecture for Bcache is not needed
  anymore (fix regression tests for bsc#1129787).
- 4.1.77</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Add support for installing over NFS with AutoYaST (bsc#1130256).
- 4.1.78</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554292800">- Fix initial proposal to make a clean copy of initial settings
  before switching to another candidate device (bsc#1130392).
- Related to bsc#1102026 and bsc#1090383.
- 4.1.79</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554292801">- Fix NFS root detection when installing with AutoYaST
  (needed for bsc#1130256).
- 4.1.80</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1554897600">- Partitioner: when editing a block device, clean-up useless
  LVM PV metadata from it (bsc#1129663)
- 4.1.81</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554897601">- AutoYaST: new format for importing/exporting NFS drives.
- Related to bsc#1130256.
- 4.1.82</changelog>
  <changelog author="ancor@suse.com" date="1555329600">- Partitioner: fixed translation issues related to bcache
  (bsc#1126822).
- 4.1.83</changelog>
  <changelog author="ancor@suse.com" date="1557489600">- AutoYaST: do not ask for a reusable filesystem when it's not
  really needed (bsc#1134330).
- 4.1.84</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1562673600">- AutoYaST: Fixed typo in filesystem type that caused a crash
  (bsc#1136272)
- 4.1.85</changelog>
</package>
<package pkgid="7a45085b1c3b1e7525d0e61b0c727f9924b921aeb6bb78cd48a57864d14a6cbb" name="yast2-support" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="lp151.2.3.1"/>
  <changelog author="jsrain@suse.cz" date="1401364800">- point to SUSE Support Center, more similar text adjustments
  (bnc#879400)
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1426766400">- Do not show ANSI escape codes on screen (bnc#921233)
- 3.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1497614400">- Allow service request number longer then 11 digits (bsc#1040706)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1535630400">- In ncurses the "Next" button to submit the gathered information
  was not visible (bsc#1093358)
- Made the Contact Information screen fit in a 80x24 terminal
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.0.2</changelog>
  <changelog author="jreidinger@suse.com" date="1544702400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.0</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1559044800">- Fix the support url (bsc#1136145)
- 4.1.1</changelog>
</package>
<package pkgid="f5a8c0447ce24ca1dd32e1fa7d82e24df7a3bebf5aa2c06f10b7cfc7ee78142a" name="yast2-support" arch="src">
  <version epoch="0" ver="4.1.1" rel="lp151.2.3.1"/>
  <changelog author="mzugec@suse.cz" date="1263816000">- fixed desktop file (Categories)
- 2.19.0</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="tgoettlicher@suse.de" date="1352808000">- confirmed license GPL v2
- 2.19.1</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1376913600">- added option to include additional logs (bnc#806924)
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jsrain@suse.cz" date="1398340800">- adjusted help text - name technical support correctly
  (bnc#872123)
- 3.1.1</changelog>
  <changelog author="jsrain@suse.cz" date="1399982400">- save report to /var/log by default (bnc#875994)
- 3.1.2</changelog>
  <changelog author="jsrain@suse.cz" date="1399982401">- assure that /etc/supportconfig.conf exists (bnc#876038)
- 3.1.3</changelog>
  <changelog author="jsrain@suse.cz" date="1401364800">- point to SUSE Support Center, more similar text adjustments
  (bnc#879400)
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1426766400">- Do not show ANSI escape codes on screen (bnc#921233)
- 3.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1497614400">- Allow service request number longer then 11 digits (bsc#1040706)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1535630400">- In ncurses the "Next" button to submit the gathered information
  was not visible (bsc#1093358)
- Made the Contact Information screen fit in a 80x24 terminal
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.0.2</changelog>
  <changelog author="jreidinger@suse.com" date="1544702400">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.0</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1559044800">- Fix the support url (bsc#1136145)
- 4.1.1</changelog>
</package>
<package pkgid="53d17914cc952a96db30047122a98c701c340dff99d59930219a5b465816fe4a" name="yast2-update" arch="i586">
  <version epoch="0" ver="4.1.10" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1534852800">- Do not crash at upgrade when the original /etc/resolv.conf
  file is set to immutable (bsc#1096142)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="aschnell@suse.com" date="1536667200">- do not translate snapshot description (bsc#1092757)
- 4.1.2</changelog>
  <changelog author="dgonzalez@suse.com" date="1537185600">- Avoid to restore old backups when upgrade fails (bsc#1097297)
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Fixed crash while writing backup (bsc#1108934)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="jlopez@suse.com" date="1541419200">- Avoid to crash when crypttab contains entries where the LUKS is
  given by UUID= format.
- Avoid to crash when an encryption device is not probed with the
  name indicated in a fstab entry.
- Related to bsc#1094963.
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1548331200">- Added URL tag to the spec file (bsc#1097957)
- 4.1.8</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1559822400">- Going back and forward in the update workflow: Initialize
  add-on products and system packages correctly (bsc#1136012).
- 4.1.10</changelog>
</package>
<package pkgid="23048578ca1dacacd2971c3243c150955c642cf7ec303a68898c19e46b0f7f7c" name="yast2-update" arch="src">
  <version epoch="0" ver="4.1.10" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1534852800">- Do not crash at upgrade when the original /etc/resolv.conf
  file is set to immutable (bsc#1096142)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="aschnell@suse.com" date="1536667200">- do not translate snapshot description (bsc#1092757)
- 4.1.2</changelog>
  <changelog author="dgonzalez@suse.com" date="1537185600">- Avoid to restore old backups when upgrade fails (bsc#1097297)
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Fixed crash while writing backup (bsc#1108934)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="jlopez@suse.com" date="1541419200">- Avoid to crash when crypttab contains entries where the LUKS is
  given by UUID= format.
- Avoid to crash when an encryption device is not probed with the
  name indicated in a fstab entry.
- Related to bsc#1094963.
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1548331200">- Added URL tag to the spec file (bsc#1097957)
- 4.1.8</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1559822400">- Going back and forward in the update workflow: Initialize
  add-on products and system packages correctly (bsc#1136012).
- 4.1.10</changelog>
</package>
<package pkgid="8e2a5bd7ddbbf6c1636f18b33f2a95cff135cf4b4d968097731a98a138d38e65" name="yast2-update" arch="x86_64">
  <version epoch="0" ver="4.1.10" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1534852800">- Do not crash at upgrade when the original /etc/resolv.conf
  file is set to immutable (bsc#1096142)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="aschnell@suse.com" date="1536667200">- do not translate snapshot description (bsc#1092757)
- 4.1.2</changelog>
  <changelog author="dgonzalez@suse.com" date="1537185600">- Avoid to restore old backups when upgrade fails (bsc#1097297)
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Fixed crash while writing backup (bsc#1108934)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="jlopez@suse.com" date="1541419200">- Avoid to crash when crypttab contains entries where the LUKS is
  given by UUID= format.
- Avoid to crash when an encryption device is not probed with the
  name indicated in a fstab entry.
- Related to bsc#1094963.
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1548331200">- Added URL tag to the spec file (bsc#1097957)
- 4.1.8</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1559822400">- Going back and forward in the update workflow: Initialize
  add-on products and system packages correctly (bsc#1136012).
- 4.1.10</changelog>
</package>
<package pkgid="e271c8562a0ec53a4bc64e2038c1ddd1788d60b5ed11ee2a9bf1a878ffcf94d8" name="yast2-update-FACTORY" arch="i586">
  <version epoch="0" ver="4.1.10" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1534852800">- Do not crash at upgrade when the original /etc/resolv.conf
  file is set to immutable (bsc#1096142)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="aschnell@suse.com" date="1536667200">- do not translate snapshot description (bsc#1092757)
- 4.1.2</changelog>
  <changelog author="dgonzalez@suse.com" date="1537185600">- Avoid to restore old backups when upgrade fails (bsc#1097297)
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Fixed crash while writing backup (bsc#1108934)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="jlopez@suse.com" date="1541419200">- Avoid to crash when crypttab contains entries where the LUKS is
  given by UUID= format.
- Avoid to crash when an encryption device is not probed with the
  name indicated in a fstab entry.
- Related to bsc#1094963.
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1548331200">- Added URL tag to the spec file (bsc#1097957)
- 4.1.8</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1559822400">- Going back and forward in the update workflow: Initialize
  add-on products and system packages correctly (bsc#1136012).
- 4.1.10</changelog>
</package>
<package pkgid="114e5b226ee812432a186bd78983b5c431bef874b9acc17ffb6c7d06e4ffb1ea" name="yast2-update-FACTORY" arch="x86_64">
  <version epoch="0" ver="4.1.10" rel="lp151.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1534852800">- Do not crash at upgrade when the original /etc/resolv.conf
  file is set to immutable (bsc#1096142)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534939200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="aschnell@suse.com" date="1536667200">- do not translate snapshot description (bsc#1092757)
- 4.1.2</changelog>
  <changelog author="dgonzalez@suse.com" date="1537185600">- Avoid to restore old backups when upgrade fails (bsc#1097297)
- 4.1.3</changelog>
  <changelog author="schubi@suse.de" date="1537358400">- Fixed crash while writing backup (bsc#1108934)
- 4.1.4</changelog>
  <changelog author="schubi@suse.de" date="1539691200">- Added license file to spec.</changelog>
  <changelog author="jlopez@suse.com" date="1541419200">- Avoid to crash when crypttab contains entries where the LUKS is
  given by UUID= format.
- Avoid to crash when an encryption device is not probed with the
  name indicated in a fstab entry.
- Related to bsc#1094963.
- 4.1.5</changelog>
  <changelog author="schubi@suse.de" date="1542715200">- Function SelectProduct removed in order NOT to select All
  available products (bsc#1116332).
- 4.1.6</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.7</changelog>
  <changelog author="lslezak@suse.cz" date="1548331200">- Added URL tag to the spec file (bsc#1097957)
- 4.1.8</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.cz&gt;" date="1556280000">- Uninstall the "SUSE-Manager-Proxy" product when upgrading from
  SLES12 + SUMA Proxy + SUMA Branch Server (bsc#1133215)
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1559822400">- Going back and forward in the update workflow: Initialize
  add-on products and system packages correctly (bsc#1136012).
- 4.1.10</changelog>
</package>
<package pkgid="d3ae1cff5cb0fab2bcd50adf9fe796a4e3e642a01adbeff3561f57aab45fe1c3" name="yast2-users" arch="i586">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1536580800">- Fixed conflicting shortcuts in plugin module (bsc#1095320).
- 4.0.6</changelog>
  <changelog author="snwint@suse.com" date="1539950400">- read ssh keys from root user only if the user exists (bsc#1112119,
  bsc#1107456)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541160000">- Allow the root user to use a public key for authentication
  (fate#324690).
- 4.0.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541764800">- Add public keys handling support in an installed system
  (related to fate#324690).
- 4.0.9</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542024000">- Improve public key selector help (related to fate#324690).
- 4.0.10</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1542801600">- Allow system role to default to no local user (Fate#326447)</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="dgonzalez@suse.com" date="1543492800">- Allow to import, during the installation, users from the more
  recently accessed Linux installation in the system (bsc#1048983)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1544097600">- Label for importing public SSH key changed (bsc#1118617).
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1545220800">- Improved layout for root password screen mask (bsc#1119671).
- 4.1.3</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1545307200">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1546948800">- Fixed a syntax error in UsersPluginQuota.pm introduced
  in the previous change (bsc#1118291).
- 4.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1547208000">- Fixed call to renamed method (bsc#1121473).
- 4.1.6</changelog>
  <changelog author="dgonzalez@suse.com" date="1549886400">- Allow to create the user home directory as Btrfs subvolume
  (fate#316134).
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1550491200">- Fixed console warning produced by Users.pm module.
  (bsc#1121070)
  Fixed typo CRACKLIB_DICT_PATH in security setting.
- 4.1.8</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Delete remaining dead code for encrypted homes
  (bsc#1127138, fate#323541).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1551355200">- Removed "btrfs_subvolume" from user default values (bsc#1125779)
- Added AutoYaST support for home Btrfs subvolumes.
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1552305600">- Added tag home_btrfs_subvolume to *.rnc file (bsc#1128707)
- Improved error message layout while creating btrfs subvolumes.
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1555329600">- AY creating user: Improved checking of already existing home
  directories (bsc#1130158)
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1558008000">- Fix the user creation in the installed systems, obeying the
  decision about creating the user's home as a plain directory
  or as a Btrfs subvolume (bsc#1134970).
- 4.1.13</changelog>
</package>
<package pkgid="693a19d9794f8ff0bde371cb3164aa45dbd222110702ddd6006f4bb4989a8dcb" name="yast2-users" arch="src">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1536580800">- Fixed conflicting shortcuts in plugin module (bsc#1095320).
- 4.0.6</changelog>
  <changelog author="snwint@suse.com" date="1539950400">- read ssh keys from root user only if the user exists (bsc#1112119,
  bsc#1107456)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541160000">- Allow the root user to use a public key for authentication
  (fate#324690).
- 4.0.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541764800">- Add public keys handling support in an installed system
  (related to fate#324690).
- 4.0.9</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542024000">- Improve public key selector help (related to fate#324690).
- 4.0.10</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1542801600">- Allow system role to default to no local user (Fate#326447)</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="dgonzalez@suse.com" date="1543492800">- Allow to import, during the installation, users from the more
  recently accessed Linux installation in the system (bsc#1048983)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1544097600">- Label for importing public SSH key changed (bsc#1118617).
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1545220800">- Improved layout for root password screen mask (bsc#1119671).
- 4.1.3</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1545307200">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1546948800">- Fixed a syntax error in UsersPluginQuota.pm introduced
  in the previous change (bsc#1118291).
- 4.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1547208000">- Fixed call to renamed method (bsc#1121473).
- 4.1.6</changelog>
  <changelog author="dgonzalez@suse.com" date="1549886400">- Allow to create the user home directory as Btrfs subvolume
  (fate#316134).
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1550491200">- Fixed console warning produced by Users.pm module.
  (bsc#1121070)
  Fixed typo CRACKLIB_DICT_PATH in security setting.
- 4.1.8</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Delete remaining dead code for encrypted homes
  (bsc#1127138, fate#323541).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1551355200">- Removed "btrfs_subvolume" from user default values (bsc#1125779)
- Added AutoYaST support for home Btrfs subvolumes.
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1552305600">- Added tag home_btrfs_subvolume to *.rnc file (bsc#1128707)
- Improved error message layout while creating btrfs subvolumes.
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1555329600">- AY creating user: Improved checking of already existing home
  directories (bsc#1130158)
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1558008000">- Fix the user creation in the installed systems, obeying the
  decision about creating the user's home as a plain directory
  or as a Btrfs subvolume (bsc#1134970).
- 4.1.13</changelog>
</package>
<package pkgid="dca540f47959c217e82e17e068d6d888b411ce6e0392f511c95d1c7062fb0613" name="yast2-users" arch="x86_64">
  <version epoch="0" ver="4.1.13" rel="lp151.2.3.1"/>
  <changelog author="schubi@suse.de" date="1536580800">- Fixed conflicting shortcuts in plugin module (bsc#1095320).
- 4.0.6</changelog>
  <changelog author="snwint@suse.com" date="1539950400">- read ssh keys from root user only if the user exists (bsc#1112119,
  bsc#1107456)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541160000">- Allow the root user to use a public key for authentication
  (fate#324690).
- 4.0.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1541764800">- Add public keys handling support in an installed system
  (related to fate#324690).
- 4.0.9</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1542024000">- Improve public key selector help (related to fate#324690).
- 4.0.10</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1542801600">- Allow system role to default to no local user (Fate#326447)</changelog>
  <changelog author="Noah Davis &lt;noahadvs@gmail.com&gt;" date="1543233600">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="dgonzalez@suse.com" date="1543492800">- Allow to import, during the installation, users from the more
  recently accessed Linux installation in the system (bsc#1048983)
- 4.1.1</changelog>
  <changelog author="schubi@suse.de" date="1544097600">- Label for importing public SSH key changed (bsc#1118617).
- 4.1.2</changelog>
  <changelog author="schubi@suse.de" date="1545220800">- Improved layout for root password screen mask (bsc#1119671).
- 4.1.3</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1545307200">- always use absolute path to binaries (bsc#1118291)
- properly escape shell arguments (bsc#1118291)
- 4.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1546948800">- Fixed a syntax error in UsersPluginQuota.pm introduced
  in the previous change (bsc#1118291).
- 4.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1547208000">- Fixed call to renamed method (bsc#1121473).
- 4.1.6</changelog>
  <changelog author="dgonzalez@suse.com" date="1549886400">- Allow to create the user home directory as Btrfs subvolume
  (fate#316134).
- 4.1.7</changelog>
  <changelog author="schubi@suse.de" date="1550491200">- Fixed console warning produced by Users.pm module.
  (bsc#1121070)
  Fixed typo CRACKLIB_DICT_PATH in security setting.
- 4.1.8</changelog>
  <changelog author="mvidner@suse.com" date="1551268800">- Delete remaining dead code for encrypted homes
  (bsc#1127138, fate#323541).
- 4.1.9</changelog>
  <changelog author="schubi@suse.de" date="1551355200">- Removed "btrfs_subvolume" from user default values (bsc#1125779)
- Added AutoYaST support for home Btrfs subvolumes.
- 4.1.10</changelog>
  <changelog author="schubi@suse.de" date="1552305600">- Added tag home_btrfs_subvolume to *.rnc file (bsc#1128707)
- Improved error message layout while creating btrfs subvolumes.
- 4.1.11</changelog>
  <changelog author="schubi@suse.de" date="1555329600">- AY creating user: Improved checking of already existing home
  directories (bsc#1130158)
- 4.1.12</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1558008000">- Fix the user creation in the installed systems, obeying the
  decision about creating the user's home as a plain directory
  or as a Btrfs subvolume (bsc#1134970).
- 4.1.13</changelog>
</package>
<package pkgid="74c01a60006c3d3a9685fab5b1c89dd9aacd440acca20a3e6a0cd8a40e72a3be" name="yubioath-desktop" arch="src">
  <version epoch="0" ver="4.3.6" rel="lp151.3.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1422360000">- Version 0.1.1 (released 2014-04-25)
    Fix Password bug
    Version 0.1.0 (released 2014-03-18)
    Stable version tested on
    Windows 8 / 8.1 / 7 (x64)
    Linux Ubuntu 12.04
    Mac OSX Mountain Lion / Mavericks
    Version 0.0.6 (released 2014-03-17)
    New MultiReader support
    detect the NEO over multiple readers
    improved patch for mac osx
    minor fix
    Version 0.0.5 (released 2014-03-11)
    New Mac OSX
    Fixed icons
    Fixex Yubikey NEO support by adding a custom patch to edit Info.plist
    CCID TOOLS should not be needed anymore
    Version 0.0.4 (released 2014-03-05)
    Fixed a bug that was causing Yubico logo not to display correctly
    Version 0.0.3 (released 2014-03-05)
    New Features:
    OSX PKG
    Fixed .spec file added .icns
    Version 0.0.2 (released 2014-02-26)
    New Features:
    Menu Bar
    Ability to set a password
    Version 0.0.1 (released 2014-02-19)
    Initial release supporting mode changing.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437048000">- Version 2.1.1 (released 2015-07-02)
  - Added man pages.
  - Fixed bug with non-CCID YubiKeys not displaying slot-bsed credentials.
  - Windows installer/uninstaller checks for running instance, and closes it.
- Version 2.1.0 (released 2015-06-26)
  - Added setting to kill scdaemon on show, to release the device (GUI only).
  - Added the ability to program standard YubiKeys with slot-based TOTP credentials.
  - Added functionality to the CLI for programming YubiKeys.
  - Added the reset command for wiping a device (CLI only).
  - Better handling of composite modes.
  - Support non-ascii characters in card reader names.
- Version 2.0.2 (released 2015-06-16)
  - Minor packaging related fixes.
- Version 2.0.1 (released 2015-06-16)
  - Minor fixes to platform specific quirks.
- Version 2.0.0 (released 2015-06-15)
  - Complete rewrite
  - Supports all OATH-enabled YubiKeys, including YubiKey Standard.
  - New overhauled UI.</changelog>
  <changelog author="t.gruner@katodev.de" date="1438084800">- Add "Requires: python-pyside" in .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1440417600">- Add Workaround  (https://github.com/Yubico/yubioath-desktop/issues/26)
- Version 2.2.1 (released 2015-08-20)
  - Bugfix release: Fix adding credentials via the UI.
- Version 2.2.0 (released 2015-08-18)
  - Allow spaces in OATH keys.
  - Don?t crash if smartcard subsystem isn?t available.
  - Disable systray icon by default.
  - Added a flag to start the application minimized to the systray.
  - Added the ability to scan QR codes from the screen.</changelog>
  <changelog author="t.gruner@katodev.de" date="1445774400">- Fix dependencive in .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1448366400">- Version 2.3.0 (released 2015-11-20)
  - Re-schedule timer each time period based on system time to prevent Qt timer drift.
  - Clear password memory cache on minimize to prevent accidentally leaving the YubiKey unlocked unattended.
  - Support for credentials which require touch (YubiKey 4 only).</changelog>
  <changelog author="t.gruner@katodev.de" date="1511870400">- Version 4.2.0+deps.2 (de-published)
    Identical to release 4.2.0+deps except it unpacks to a directory with the same name as the archive
  Version 4.2.0+deps (de-published)
    Identical to release 4.2.0b, but renamed to a valid Semantic Versioning version number
  Version 4.2.0b (de-published)
    Source re-release with dependencies bundled in the archive
  Version 4.2.0+2 (released 2017-11-17)
    Identical to release 4.2.0 except it unpacks to a directory with the same name as the archive
  Version 4.2.0 (released 2017-09-14)
    Added support for 7 digit credentials.
    Added support for credentials with a non 30-second period.
    Moved "Scan QR code" functionality, now available directly from main view.
    Flip moving direction of the time left indicator.
    Win 7: Fixed issue with OpenGL rendering.
    macOS: Allow OpenGL to use integrated GPU.
    Bugfix: Issuer was not displayed correctly on Ubuntu.
  Version 4.1.4 (released 2017-08-17)
    Double-click on system tray icon now shows the credentials. Not supported on macOS.
    Windows: An issue with the video drivers on some machines have been resolved.
    The About dialog now closes when the ESC key is pressed.
    UI: The credential codes should now follow any font scaling done by the operating system.
    UI: Codes now have a space in them for better readability.
  Version 4.1.3 (released 2017-08-03)
    Feature: Double-click to generate a code and copy it to the clipboard.
    Feature: When searching, press the ESC key to clear the search field and press Enter to generate and copy a code.
    Added an error message for adding a credential when there is no storage space left on the device.
    Added an error message for adding a too large key when in Slot mode.
    Clicking outside the search field now removes focus from it.
    Names on new credentials can?t be longer than 64 bytes.
    UI: Don?t show timer when there is no credentials.
    The default button in the password prompt is now OK.
    Bugfix: Fixed crash caused by some QR codes.
    Bugfix: The selected credential was not being updated correctly.
    macOS: Remove sandbox entitlements to work better when running on a system with gpg-agent.
  Version 4.1.2 (released 2017-05-12)
    Ubuntu: Fixed crash after entering password on Ubuntu 17.04
    Windows: Fixed issue with window spawning outside desktop.
  Version 4.1.1 (released 2017-05-09)
    Windows: Fixed issue with missing OpenGL drivers, include ANGLE in windows build.
    macOS: Fixed issue with incorrect linking to OpenSSL, causing the application to freeze when reading credentials.
    Bugfix: Touch credentials were not being selected correctly.
    Bugfix: Steam credentials were incorrect when read from a YubiKey 4.
  Version 4.1.0 (released 2017-04-10)
    Added a optional system tray shortcut.
    Sort credentials based on name.
    Improved scrolling, keep scroll position when credentials are reloaded.
    Bugfix: new passwords was always being cleared.
    Removed custom coloring of progress bar, use system theming.
  Version 4.0.1 (released 2017-03-27)
    Bugfix: Follow color schemes better.
    Removed some spacing thath caused the layout to be slightly off.
    Improved focus switching betweeen search bar and credentials.
    Added keyboard shortcut (Ctrl/Cmd + F) for focus on the search bar.
    Select the top credential during search.
    Remember window location and dimensions between launches.
    Add a Edit menu in the menu bar for credentials.
    Improved error logging.
    macOS: Close app with Cmd + W.
    Windows installer: install Visual C++ redistributable packages if needed.
  Version 4.0.0 (released 2017-03-20)
    The UI has been completely rewritten, to allow us to use a more modern technology stack. All main functionality and concepts are kept the same.
    CLI version has been removed from this porject, the functionality is now found in the YubiKey Manager (ykman) tool.
    Slot mode and CCID mode are now kept separated, choose which mode to use under "Settings".
    Added keyboard shortcuts for copy code, generate code, delete credential, add credential and settings.
    Added support for reseting all OATH credentials and password.
  Version 3.1.0b (released 2016-12-16)
    Fix crash on macOS related to how the application was built. New installer for macOS based on previous release.
  Version 3.1.0 (released 2016-11-22)
    Added a search bar for credentials.
    Added support for adding SHA256 credentials in the GUI.
    Smart card is now being disconnected when the application is hidden.
    Bugfix: QR codes were sometimes not being parsed.
  Version 3.0.1 (released 2016-06-13)
    Bugfix release:
    Don?t import OSX libs outside of OSX.
    Packaging related fixes.
  Version 3.0.0 (released 2016-06-09)
    Added compatibility with Python 3 (Python 2 is still supported).
    Added support for generating alphanumeric Steam authenticator codes for entries prefixed with "Steam:".
    Added a confirmation dialog box when overwriting entries.
    Added the capability to delete slot-based credentials.
    UX enhancements: split up issuer and name; added larger OTP codes.
    CLI was rewritten using the "click" library.
    CLI gained a "gui" subcommand which launches the full GUI.
    Binaries were renamed (yubioath ? yubioath-gui, yubioath-cli ? yubioath).</changelog>
  <changelog author="t.gruner@katodev.de" date="1515153600">- Version 4.3.2 (released 2017-12-19)
  - Bugfix: Fixed crash on attempt to generate code for touch credential in YubiKey Slots mode
  - Bugfix: Fixed crash in QR scan
- Version 4.3.1 (released 2017-12-17)
  - Bugfix: Removed references to QML Array prototype methods added in Qt 5.9 (unavailable in Ubuntu Zesty and earlier)
- Version 4.3.0 (released 2017-12-15)
  - Now requires ykman version &gt;= 0.5.0
  - Feature: New icon
  - Feature: Remembered passwords are now shared with ykman.
  - Feature: Added option to hide window on launch
  - Thanks to Steven Stallion for contributing!
  - Feature: "About" dialog now shows OATH applet version instead of overall firmware version
  - Feature: Touch credentials generate a code for the next period if current period ends in less than 10s
  - Feature: Arrow keys now navigate the list while search field has focus
  - Thanks to Arthur Burkart for contributing!
  - Feature: Focus now starts on the search field, and ESC no longer removes focus from search field
  - Feature: Added --log-level CLI option with same function as --log-level option to ykman version 0.5.0; see ykman --help for usage
  - Bugfix: Reduced idle CPU usage
  - Bugfix: Improved error handling to prevent hanging UI
  - Bugfix: Fixed tray icon remaining after exit on Windows
  - Bugfix: Fixed sorting when some credentials have nonstandard periods
  - Bugfix: Selection now stable across refreshes and searches
  - Bugfix: Arrow keys now scroll the view only if the selection changes</changelog>
  <changelog author="t.gruner@katodev.de" date="1519214400">- Version 4.3.3 (released 2018-02-15)
  - Focus is not locked on the search field.
  - Pressing ESC now clears the search field and deselects all credentials.
  - Copying the code with a keyboard shortcut now works even if the search field has focus.
  - The top progress bar is now only displayed when needed.
  - Scanning QR codes should now work better on some multiple monitor setups.
  - Improve the handling of touch credentials when the YubiKey is never touched.
  - The application should no longer refresh credentials to often on slower systems.
  - Credentials with a custom time period should now autorefresh correctly.
  - Logging: The command line option --log-file is now supported, which writes the log to a file. The --log-file option is ignored unless preceded by the --log-level option.
  - Bugfix: The arrow key navigation is no longer broken after deleting a credential.
  - Windows: OpenGL rendering is now chosen dynamically. It?s possible to override it with the QT_OPENGL environment variable.</changelog>
  <changelog author="t.gruner@katodev.de" date="1522756800">- Fix build for Leap 15 and SLE 15</changelog>
  <changelog author="t.gruner@katodev.de" date="1530532800">- Version 4.3.4 (released 2018-05-07)
  - Support YubiKey Preview
  - Add credential: allow space in secret key.
  - Bugfix: Don?t show "No credentials found?" incorrectly.
  - Bugfix: Forget the password when removing the device.
  - Windows: 64-bit version added.</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1559476800">- Version 4.3.6 (released 2019-05-29) (bsc#1137070)
  - Windows: improve support for YubiKey NEO on Windows 10
- Version 4.3.5 (released 2019-01-02)
  - Bugfix: Show correct message when YubiKey doesn?t have the
    correct transport enabled
  - Improve error handling in Slot Mode
  - Linux: Add experimental support for .AppImage</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559563200">- Use %license macro for license file (instead of %doc)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559563201">- Add release dates and reference to bug to changes file</changelog>
</package>
<package pkgid="0789694d779e67572f18c8bbeea25a31718f5b67827efd2b77ec57f15480bd8a" name="yubioath-desktop" arch="x86_64">
  <version epoch="0" ver="4.3.6" rel="lp151.3.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1422360000">- Version 0.1.1 (released 2014-04-25)
    Fix Password bug
    Version 0.1.0 (released 2014-03-18)
    Stable version tested on
    Windows 8 / 8.1 / 7 (x64)
    Linux Ubuntu 12.04
    Mac OSX Mountain Lion / Mavericks
    Version 0.0.6 (released 2014-03-17)
    New MultiReader support
    detect the NEO over multiple readers
    improved patch for mac osx
    minor fix
    Version 0.0.5 (released 2014-03-11)
    New Mac OSX
    Fixed icons
    Fixex Yubikey NEO support by adding a custom patch to edit Info.plist
    CCID TOOLS should not be needed anymore
    Version 0.0.4 (released 2014-03-05)
    Fixed a bug that was causing Yubico logo not to display correctly
    Version 0.0.3 (released 2014-03-05)
    New Features:
    OSX PKG
    Fixed .spec file added .icns
    Version 0.0.2 (released 2014-02-26)
    New Features:
    Menu Bar
    Ability to set a password
    Version 0.0.1 (released 2014-02-19)
    Initial release supporting mode changing.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437048000">- Version 2.1.1 (released 2015-07-02)
  - Added man pages.
  - Fixed bug with non-CCID YubiKeys not displaying slot-bsed credentials.
  - Windows installer/uninstaller checks for running instance, and closes it.
- Version 2.1.0 (released 2015-06-26)
  - Added setting to kill scdaemon on show, to release the device (GUI only).
  - Added the ability to program standard YubiKeys with slot-based TOTP credentials.
  - Added functionality to the CLI for programming YubiKeys.
  - Added the reset command for wiping a device (CLI only).
  - Better handling of composite modes.
  - Support non-ascii characters in card reader names.
- Version 2.0.2 (released 2015-06-16)
  - Minor packaging related fixes.
- Version 2.0.1 (released 2015-06-16)
  - Minor fixes to platform specific quirks.
- Version 2.0.0 (released 2015-06-15)
  - Complete rewrite
  - Supports all OATH-enabled YubiKeys, including YubiKey Standard.
  - New overhauled UI.</changelog>
  <changelog author="t.gruner@katodev.de" date="1438084800">- Add "Requires: python-pyside" in .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1440417600">- Add Workaround  (https://github.com/Yubico/yubioath-desktop/issues/26)
- Version 2.2.1 (released 2015-08-20)
  - Bugfix release: Fix adding credentials via the UI.
- Version 2.2.0 (released 2015-08-18)
  - Allow spaces in OATH keys.
  - Don?t crash if smartcard subsystem isn?t available.
  - Disable systray icon by default.
  - Added a flag to start the application minimized to the systray.
  - Added the ability to scan QR codes from the screen.</changelog>
  <changelog author="t.gruner@katodev.de" date="1445774400">- Fix dependencive in .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1448366400">- Version 2.3.0 (released 2015-11-20)
  - Re-schedule timer each time period based on system time to prevent Qt timer drift.
  - Clear password memory cache on minimize to prevent accidentally leaving the YubiKey unlocked unattended.
  - Support for credentials which require touch (YubiKey 4 only).</changelog>
  <changelog author="t.gruner@katodev.de" date="1511870400">- Version 4.2.0+deps.2 (de-published)
    Identical to release 4.2.0+deps except it unpacks to a directory with the same name as the archive
  Version 4.2.0+deps (de-published)
    Identical to release 4.2.0b, but renamed to a valid Semantic Versioning version number
  Version 4.2.0b (de-published)
    Source re-release with dependencies bundled in the archive
  Version 4.2.0+2 (released 2017-11-17)
    Identical to release 4.2.0 except it unpacks to a directory with the same name as the archive
  Version 4.2.0 (released 2017-09-14)
    Added support for 7 digit credentials.
    Added support for credentials with a non 30-second period.
    Moved "Scan QR code" functionality, now available directly from main view.
    Flip moving direction of the time left indicator.
    Win 7: Fixed issue with OpenGL rendering.
    macOS: Allow OpenGL to use integrated GPU.
    Bugfix: Issuer was not displayed correctly on Ubuntu.
  Version 4.1.4 (released 2017-08-17)
    Double-click on system tray icon now shows the credentials. Not supported on macOS.
    Windows: An issue with the video drivers on some machines have been resolved.
    The About dialog now closes when the ESC key is pressed.
    UI: The credential codes should now follow any font scaling done by the operating system.
    UI: Codes now have a space in them for better readability.
  Version 4.1.3 (released 2017-08-03)
    Feature: Double-click to generate a code and copy it to the clipboard.
    Feature: When searching, press the ESC key to clear the search field and press Enter to generate and copy a code.
    Added an error message for adding a credential when there is no storage space left on the device.
    Added an error message for adding a too large key when in Slot mode.
    Clicking outside the search field now removes focus from it.
    Names on new credentials can?t be longer than 64 bytes.
    UI: Don?t show timer when there is no credentials.
    The default button in the password prompt is now OK.
    Bugfix: Fixed crash caused by some QR codes.
    Bugfix: The selected credential was not being updated correctly.
    macOS: Remove sandbox entitlements to work better when running on a system with gpg-agent.
  Version 4.1.2 (released 2017-05-12)
    Ubuntu: Fixed crash after entering password on Ubuntu 17.04
    Windows: Fixed issue with window spawning outside desktop.
  Version 4.1.1 (released 2017-05-09)
    Windows: Fixed issue with missing OpenGL drivers, include ANGLE in windows build.
    macOS: Fixed issue with incorrect linking to OpenSSL, causing the application to freeze when reading credentials.
    Bugfix: Touch credentials were not being selected correctly.
    Bugfix: Steam credentials were incorrect when read from a YubiKey 4.
  Version 4.1.0 (released 2017-04-10)
    Added a optional system tray shortcut.
    Sort credentials based on name.
    Improved scrolling, keep scroll position when credentials are reloaded.
    Bugfix: new passwords was always being cleared.
    Removed custom coloring of progress bar, use system theming.
  Version 4.0.1 (released 2017-03-27)
    Bugfix: Follow color schemes better.
    Removed some spacing thath caused the layout to be slightly off.
    Improved focus switching betweeen search bar and credentials.
    Added keyboard shortcut (Ctrl/Cmd + F) for focus on the search bar.
    Select the top credential during search.
    Remember window location and dimensions between launches.
    Add a Edit menu in the menu bar for credentials.
    Improved error logging.
    macOS: Close app with Cmd + W.
    Windows installer: install Visual C++ redistributable packages if needed.
  Version 4.0.0 (released 2017-03-20)
    The UI has been completely rewritten, to allow us to use a more modern technology stack. All main functionality and concepts are kept the same.
    CLI version has been removed from this porject, the functionality is now found in the YubiKey Manager (ykman) tool.
    Slot mode and CCID mode are now kept separated, choose which mode to use under "Settings".
    Added keyboard shortcuts for copy code, generate code, delete credential, add credential and settings.
    Added support for reseting all OATH credentials and password.
  Version 3.1.0b (released 2016-12-16)
    Fix crash on macOS related to how the application was built. New installer for macOS based on previous release.
  Version 3.1.0 (released 2016-11-22)
    Added a search bar for credentials.
    Added support for adding SHA256 credentials in the GUI.
    Smart card is now being disconnected when the application is hidden.
    Bugfix: QR codes were sometimes not being parsed.
  Version 3.0.1 (released 2016-06-13)
    Bugfix release:
    Don?t import OSX libs outside of OSX.
    Packaging related fixes.
  Version 3.0.0 (released 2016-06-09)
    Added compatibility with Python 3 (Python 2 is still supported).
    Added support for generating alphanumeric Steam authenticator codes for entries prefixed with "Steam:".
    Added a confirmation dialog box when overwriting entries.
    Added the capability to delete slot-based credentials.
    UX enhancements: split up issuer and name; added larger OTP codes.
    CLI was rewritten using the "click" library.
    CLI gained a "gui" subcommand which launches the full GUI.
    Binaries were renamed (yubioath ? yubioath-gui, yubioath-cli ? yubioath).</changelog>
  <changelog author="t.gruner@katodev.de" date="1515153600">- Version 4.3.2 (released 2017-12-19)
  - Bugfix: Fixed crash on attempt to generate code for touch credential in YubiKey Slots mode
  - Bugfix: Fixed crash in QR scan
- Version 4.3.1 (released 2017-12-17)
  - Bugfix: Removed references to QML Array prototype methods added in Qt 5.9 (unavailable in Ubuntu Zesty and earlier)
- Version 4.3.0 (released 2017-12-15)
  - Now requires ykman version &gt;= 0.5.0
  - Feature: New icon
  - Feature: Remembered passwords are now shared with ykman.
  - Feature: Added option to hide window on launch
  - Thanks to Steven Stallion for contributing!
  - Feature: "About" dialog now shows OATH applet version instead of overall firmware version
  - Feature: Touch credentials generate a code for the next period if current period ends in less than 10s
  - Feature: Arrow keys now navigate the list while search field has focus
  - Thanks to Arthur Burkart for contributing!
  - Feature: Focus now starts on the search field, and ESC no longer removes focus from search field
  - Feature: Added --log-level CLI option with same function as --log-level option to ykman version 0.5.0; see ykman --help for usage
  - Bugfix: Reduced idle CPU usage
  - Bugfix: Improved error handling to prevent hanging UI
  - Bugfix: Fixed tray icon remaining after exit on Windows
  - Bugfix: Fixed sorting when some credentials have nonstandard periods
  - Bugfix: Selection now stable across refreshes and searches
  - Bugfix: Arrow keys now scroll the view only if the selection changes</changelog>
  <changelog author="t.gruner@katodev.de" date="1519214400">- Version 4.3.3 (released 2018-02-15)
  - Focus is not locked on the search field.
  - Pressing ESC now clears the search field and deselects all credentials.
  - Copying the code with a keyboard shortcut now works even if the search field has focus.
  - The top progress bar is now only displayed when needed.
  - Scanning QR codes should now work better on some multiple monitor setups.
  - Improve the handling of touch credentials when the YubiKey is never touched.
  - The application should no longer refresh credentials to often on slower systems.
  - Credentials with a custom time period should now autorefresh correctly.
  - Logging: The command line option --log-file is now supported, which writes the log to a file. The --log-file option is ignored unless preceded by the --log-level option.
  - Bugfix: The arrow key navigation is no longer broken after deleting a credential.
  - Windows: OpenGL rendering is now chosen dynamically. It?s possible to override it with the QT_OPENGL environment variable.</changelog>
  <changelog author="t.gruner@katodev.de" date="1522756800">- Fix build for Leap 15 and SLE 15</changelog>
  <changelog author="t.gruner@katodev.de" date="1530532800">- Version 4.3.4 (released 2018-05-07)
  - Support YubiKey Preview
  - Add credential: allow space in secret key.
  - Bugfix: Don?t show "No credentials found?" incorrectly.
  - Bugfix: Forget the password when removing the device.
  - Windows: 64-bit version added.</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1559476800">- Version 4.3.6 (released 2019-05-29) (bsc#1137070)
  - Windows: improve support for YubiKey NEO on Windows 10
- Version 4.3.5 (released 2019-01-02)
  - Bugfix: Show correct message when YubiKey doesn?t have the
    correct transport enabled
  - Improve error handling in Slot Mode
  - Linux: Add experimental support for .AppImage</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559563200">- Use %license macro for license file (instead of %doc)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559563201">- Add release dates and reference to bug to changes file</changelog>
</package>
<package pkgid="0a3ef4388cfb63f8a258173629d0fa8e3716a43612d158cee90f7dd08fae0f9c" name="zenmap" arch="x86_64">
  <version epoch="0" ver="7.70" rel="lp151.3.3.1"/>
  <changelog author="astieger@suse.com" date="1425384000">- fix build on SLE 12 by removing gpg-offline dependency
- run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  nmap has not been ported to LUA 5.3 yet.
- Minor fix in check session: internal lua identifies itself as
  5.2.3 by now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1444046400">- Fix the build for Factory. Insist on lua 5.2.x</changelog>
  <changelog author="astieger@suse.com" date="1444046401">- Unbreak everything not Factory</changelog>
  <changelog author="mardnh@gmx.de" date="1448193600">- Nmap 7.00:
  * see /usr/share/doc/packages/nmap/CHANGELOG
- removed patches:
  * nmap-4.00-noreturn.diff
  * nmap-6.00-libpcap-filter.diff
  not needed since we do not build against the bundled libpcap
- updated patch:
  * nmap-ncat-skip-network-tests.patch</changelog>
  <changelog author="astieger@suse.com" date="1450094400">- Nmap 7.01:
  * various bug fixes in NSE</changelog>
  <changelog author="astieger@suse.com" date="1458302400">- Nmap 7.10:
  * Add 12 NSE scripts
  * Integrate OS, service/version detection fingerprint submissions
  * Updated to various NSE scripts
  * Zenmap: Remember window geometry (position and size) from the
    previous time Zenmap was run.
  * Give option parsing errors after the long usage statement
  * Changed Nmap's idea of reserved and private IP addresses to include
    169.254/16 (RFC3927) and remove 6/8, 7/8, and 55/8 networks
    (for -iR randomly generated targets)
    Usage of own exclusion lists with --exclude or --exclude-file is
    recommended to avoid scanning newly-valid addresses belonging to
    the US DoD.
  * Allow the -4 option for Nmap to indicate IPv4 address family.
  * Add verbosity level of 0 (-v0): not text output</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- Nmap 7.11:
  * Add support for diffie-hellman-group-exchange-* SSH key
    exchange methods to ssh2.lua, allowing ssh-hostkey to run on
    servers that only support custom Diffie-Hellman groups.
  * Add support in sslcert.lua for Microsoft SQL Server's TDS
    protocol, so you can now grab certs with ssl-cert or check
    ciphers with ssl-enum-ciphers.
  * Fix crashes in Zenmap</changelog>
  <changelog author="astieger@suse.com" date="1459684800">- Nmap 7.12:
  * Zenmap: Avoid file corruption in zenmap.conf
  * NSE: VNC updates
  * NSE: Add STARTTLS support for VNC, NNTP, and LMTP
  * Add new service probes and match lines for OpenVPN</changelog>
  <changelog author="astieger@suse.com" date="1475668800">- Nmap 7.30:
  * Many added NSE scripts, OS fingerprints, service probes
  * Improved output filtering
  * Using Lua 5.3
  * Many bug fixes, improvements and performance enhancements</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- Nmap 7.31:
  * Fix the way Nmap handles scanning names that resolve to the
    same IP
  * Zenmap: Better visual indication that display of hostname is
    tied to address in the Topology page</changelog>
  <changelog author="idonmez@suse.com" date="1483012800">- Nmap 7.40:
  * Many added NSE scripts, OS fingerprints, service probes
  * New option --defeat-icmp-ratelimit dramatically reduces UDP
    scan times in exchange for labeling unresponsive
    (and possibly open) ports as "closed|filtered".
  * New NSE library, geoip.lua, provides a common framework for
    storing and retrieving IP geolocation results.
  * See https://nmap.org/changelog.html#7.40 for the complete
    changelog.
- Refresh nmap-5.61-desktop_files.patch as
  nmap-7.40-desktop_files.patch</changelog>
  <changelog author="idonmez@suse.com" date="1497614400">- Nmap 7.50:
  * Integrated all of your service/version detection fingerprints
    submitted from September to March (855 of them). The signature
    count went up 2.9% to 11,418. We now detect 1193 protocols from
    apachemq, bro, and clickhouse to jmon, slmp, and zookeeper.
    Highlights: http://seclists.org/nmap-dev/2017/q2/140
  * Many added NSE scripts, OS fingerprints, service probes
  * See https://nmap.org/changelog.html#7.50 for the complete changelog.</changelog>
  <changelog author="erwin.vandevelde@gmail.com" date="1501675200">- Nmap 7.60:
  * NSE scripts now have complete SSH support via libssh2
  * Added 14 NSE scripts from 6 authors, bringing the total up to 579!
  * See https://nmap.org/changelog.html#7.60 for the complete changelog.</changelog>
  <changelog author="mvetter@suse.com" date="1521720000">- Update to 7.70:
  * 14 new NSE scripts
  * iec-identify probes for the IEC 60870-5-104 SCADA protocol
  * ssh-brute performs brute-forcing of SSH password credentials
  * See https://nmap.org/changelog.html#7.70 for the complete changelog.</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556539200">- add "Requires: python-xml" for zenmap [bsc#1133512]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1556884800">- add nmap-7.70-CVE-2018-15173_pcre_limits.patch to reduce LibPCRE
  resource limits so that version detection can't use as much of
  the stack. Previously Nmap could crash when run on low-memory
  systems against target services which are intentionally or
  accidentally difficult to match [bsc#1104139] [CVE-2018-15173].</changelog>
</package>
<package pkgid="03b6a03ecb901a47dd1ad40ce000deae0b45c2c1e1e9c9a4cfc2db27524777de" name="zeromq" arch="src">
  <version epoch="0" ver="4.2.3" rel="lp151.5.3.1"/>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
</package>
<package pkgid="91ce06bd058eb6aaaacd78ed716ff8b11616bff28e136728e7a9de91b78214ec" name="zeromq-devel" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp151.5.3.1"/>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
</package>
<package pkgid="b5869162b97eb73ea72e7080cd39c457d445e0e24acabf4ca2d4b9ae12e814a5" name="zeromq-tools" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp151.5.3.1"/>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
</package>
<package pkgid="b80a46956feb3a4a90629fc0d4eda48ea52d63cab91603733ce92e8ed750bd5c" name="znc" arch="src">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="8b9ce8686b5558075033ac51bdca124d72c5fc5e7135e4a2d03b292d250dfede" name="znc" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="255bc75dad2d4f05dbb25b4a9653cc97370ab7556230918fb1ff3b650768237e" name="znc-devel" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="27994f081def293255ae7bf2abd63d519633db7f7745a7594064fd6d7f39ad41" name="znc-lang" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="6b48cf18c2c922e88caaada5733d5dc1d2b79553e3c59b8669970cfe06cbf48a" name="znc-perl" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="0ad43b27d96f669c76f9207171cbaf1061d3f00a9f552d3ac410892a2d81bd34" name="znc-python3" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
<package pkgid="7fa5cb0090ef3aa34998fd36c9c816b98a9cce2c7220f9c49d73237249531c5d" name="znc-tcl" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="lp151.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1548763200">- Update to version 1.7.2:
  * Fix compilation without deprecated APIs in OpenSSL (#1615)
  * Distinguish Channel CTCP Requests and Replies (#1624)
  * admindebug: Enforce need of TTY to turn on debug mode (#1580)
  * controlpanel: Add missing return to ListNetMods (#1589)
  * webadmin: Fix adding the last allowed network (#1584)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1553515200">- Fix boo#1130360 CVE-2019-9917
  * znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559044800">- Update to version 1.7.3:
  * This is a security release to fix CVE-2019-9917.
  * Docker only: the znc image now supports --user option of docker
    run.
- Drop no longer needed znc-CVE-2019-9917.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1561636800">- Update to version 1.7.4:
  * This is a security release to fix CVE-2019-12816 boo#1138572
  * Send "Connected!" messages to client to the correct nick</changelog>
</package>
</otherdata>